aradBlog Multiple Remote Vulnerabilities

Exploit for asp platform in category web applications ======================================== aradBlog Multiple Remote Vulnerabilities ======================================== Title : aradBlog Multiple Remote Vulnerabilities Affected Version : http://Example.com/downloads/uploa...

aradblog - Multiple Vulnerabilities

aradblog - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub10-aradblog-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : aradBlog Multiple...

CVE-2009-4987

CVE-2009-4987 affects Scripteen Free Image Hosting Script 2.3. The issue allows remote unauthenticated users to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a flow noted as a different vector from CVE-2008-3211. The available documents do not spec...

PT-2010-4096 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 0.8.7g Description: The issue allows remote attackers to inject arbitrary web script or HTML via the name element in an XML template to templates import.php. Additionally, remote authenticated administrators can inject...

NinkoBB - Cross-Site Request Forgery

Title: NinkoBB CSRF Vulnerability Author: ADEO Security Published: 30/06/2010 Version: 1.3RC5 Possible all versions Vendor: http://ninkobb.com Download: http://ninkobb.com/releases/?NinkoBB-1.3RC5.zip Description: "NinkoBB is an open source forum script written in the PHP language and uses a MySQ...

CVE-2009-4909

admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests...

SA-CONTRIB-2010-053 - External Link Page - Cross Site Scripting (XSS)

The External Link Page provides a content filter that redirects external links to a customizable page. This page informs the user that they are about to leave the site and then redirects them. The module does not sanitise data input in it's administration page before displaying it on redirect...

GetSimple 2.01 Local File Inclusion

Exploit Title: GetSimple 2.01 LFI Date: 4/5/2010 Author: Batch Software Link: http://www.box.net/get-simple Version: 2.01 Special Conditions: Must be admin. Code : ... get file if fileexists$GET'file' readfile$GET'file', 'r'; exit;...

Getsimple CMS 2.01 - Local File Inclusion

Exploit Title: GetSimple 2.01 LFI Date: 4/5/2010 Author: Batch Software Link: http://www.box.net/get-simple Version: 2.01 Special Conditions: Must be admin. Code : ... get file if fileexists$GET'file' readfile$GET'file', 'r'; exit;...

Viennabux Beta! - cat SQL Injection

Viennabux Beta! - cat SQL Injection source: https://www.securityfocus.com/bid/39602/info Viennabux Beta! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

QuickEStore 6.1 Database Disclosure

======================================================================================== | Title : QuickEStore 6.1 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu ...

Friendly-Tech FriendlyTR69 2.8.9 SQL Injection

========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability ========================================= ===================== I. BACKGROUND ===================== Based on the company’s...

Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection

========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability ========================================= ===================== I. BACKGROUND ===================== Based on the company’s...

ESCMS cookies欺骗漏洞

% if Request.cookiesCookiesKey"ESadmin"="" then ''注意这里哦,他是通过COOKIE验证ESadmin是否为空,我们可以伪造一个值,叫他不为空 ''CookiesKey在inc/ESCMSConfig.asp文件中,默认为ESCMS$SP2 Call ErrShow Response.End End if ...... % 首先我们打开http://sitedir.com.cn/admin/esindex.html 然后在COOKIE结尾加上 ; ESCMS$SP2=ESadmin=st0p; 修改,然后刷新 进后台了嘎...

Newbie CMS 0.0.2 - Insecure Cookie Authentication Bypass

Newbie CMS 0.0.2 - Insecure Cookie Authentication Bypass source: https://www.securityfocus.com/bid/38421/info Newbie CMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this...

statcountex 3.1 - Multiple Vulnerabilities

statcountex 3.1 - Multiple Vulnerabilities Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34 Version: 3.1 Tested on: Windows xp sp3 ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ / /| ' \ | | | | | | / | | | | | | | | | || ||...

statcountex 3.1 - Multiple Vulnerabilities

Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34 Version: 3.1 Tested on: Windows xp sp3 ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ / /| ' \ | | | | | | / | | | | | | | | | || || |||| ||//|| || ||...

StatCounteX 3.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== StatCounteX 3.1 Multiple Vulnerabilities ======================================== Exploit Title: StatCounteX 3.1 Multiple Vulnerabilities Author: Phenom Software Link:...

StatCounteX 3.1 Database Disclosure / Administrative Access

Exploit Title: StatCounteX 3.1 Multiple Vulnerabilities Date: 12/02/2010 Author: Phenom Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34 Version: 3.1 Tested on: Windows xp sp3 CVE : Code : ------------------------------------------------------ | | | | | | | | /| ' \ ...

Ke long shopping site management system vulnerability-vulnerability warning-the black bar safety net

Today to see a shopping site, readily guessing a backend admin, found that really have this background, and is directly into the background, and then verify what until after the jump back to the admin. asp this administrator login leaf surface. Since the flash is very fast, and did not see the...