7278 matches found
new vulnerability founded by ostoure
www.Ostoure.com | | Ostoure Security Research Team | | Title: Naroun ADSL-Tools authentication Bypass | Vendor: http://www.mixoftix.net | Exploitation: Remote with browser ==================== - Description: ==================== The data in the admin folder "operator" can be accessed via a normal...
Allomani Mobile 2.5 - Blind SQL Injection
Allomani Mobile 2.5 - Blind SQL Injection ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Allomani Mobile v2.5 /QQQ/\QQQ\ Blind SQL inj. exploit /QQQQQ/ \QQQQQQ\ q GET 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://allomani.com |QQQQ/ By Qaband...
ZenPhoto Gallery 1.2.5 Admin Password Reset (CRSF)
Exploit for unknown platform in category web applications ================================================== ZenPhoto Gallery 1.2.5 Admin Password Reset CRSF ================================================== ?php Zen Photo Adminstrator Password Steal/Reset Exploit...
ZenPhoto Gallery 1.2.5 - Admin Password Reset (Cross-Site Request Forgery)
ZenPhoto Gallery 1.2.5 - Admin Password Reset Cross-Site Request Forgery ?php Zen Photo Adminstrator Password Steal/Reset Exploit +================================================================+ Discovered and coded by petros at dusecurity.com...
YourTube 2.0 - Arbitrary Database Disclosure
YourTube 2.0 - Arbitrary Database Disclosure exploit : YourTube info : http://www.ac4p.com //= DORK: "powered by yourtube" //= found by: Security Code Team - thanks for sniper code and Qabandi -- //= our home: WwW.Sec-Code.com //= greats 4 our members in our home -- /// // - Upload this file to...
TekBase All-in-One 3.1 Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ============================================================= TekBase All-in-One 3.1 Multiple SQL Injection Vulnerabilities ============================================================= Author: n3wb0ss Date: 15/06/09 Software: TekBase...
mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities
mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities MRCGIGUY The Ticket System 2.0 PHPid Multiple Remote Vulnerabilities Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.mrcgiguy.com Special Thx: All Muslims All Members Of Team Algerien Of FootBall Note:...
CVE-2009-1582
CVE-2009-1582 affects Million Dollar Text Links 1.0. The vulnerability allows a remote attacker to bypass access restrictions by directly requesting admin.home.php after visiting admin.php, enabling privilege escalation. The root cause is improper access control around admin.home.php. Public refe...
Server side request forgery (ssrf)
Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to obtain the administrator login name and password via a direct request...
X10Media MP3 Search Engine Admin Access
THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so displ...
X10Media Mp3 Search Engine 1.x Admin Access Vulnerability
No description provided by source. THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER t4hathotmail.fr File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location:...
X10Media Mp3 Search Engine < 1.6.2 Admin Access Vulnerability
Exploit for unknown platform in category web applications ============================================================= X10Media Mp3 Search Engine isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so display all forms. / ---------------------------------------- if the...
X10Media Mp3 Search Engine < 1.6.2 Admin Access Vulnerability
No description provided by source. THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER t4hathotmail.fr File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location:...
X10media Mp3 Search Engine 1.6.2 - Admin Access
X10media Mp3 Search Engine 1.6.2 - Admin Access THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location: ../main.php"...
X10media Mp3 Search Engine < 1.6.2 - Admin Access
THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so displ...
Oracle SMB Relay Code Execution
This module will help you to get Administrator access to OS using an unprivileged Oracle database user you need only CONNECT and RESOURCE privileges. To do this you must firstly run smbsniffer or smbrelay module on your server. Then you must connect to Oracle database and run this module...
DeluxeBB 1.3 - 'qorder' SQL Injection
Author: girex Homepage: girex.altervista.org Date: 18/03/2009 CMS: DeluxeBB 1.3 and prior site: deluxebb.com NOTE: - Works regardless of php.ini settings - This SQL injection will shows you username and md5 of ALL registered users of the site. - This PoC was written for educational purpose. Use i...
YAP 1.1.1 - Blind SQL Injection SQL Injection
YAP 1.1.1 - Blind SQL Injection SQL Injection + YAP 1.1.1 Blind SQL Injection/SQL Injection + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Blind SQL Injection The default prefix for database tables is "yap" .But can be changed at installation. PoC :...
RoomPHPlanning 1.6 - 'userform.php' Create Admin User
!/usr/bin/perl -w use LWP::UserAgent; use HTML::Form; print "\n"; print "+=RoomPHPlanning\n"; print "+=v1.x\n"; print "+=Vul: Remote Create user with all permissions admin\n"; print "+=Author: Jonathan Salwan \n"; print "+=Web: http://www.shell-storm.org\n"; print "+=Mail: submit AT...
CVE-2008-6411
Explay CMS 2.1 and earlier is affected. The root cause is an authentication bypass achieved by setting the login cookie to 1, enabling a remote attacker to gain administrative access. Documents consistently describe a login-cookie-based bypass leading to full admin rights. Exploitation details ar...