CVE-2009-4584

admin.php in dB Masters Multimedia Links Directory 3.1.3 allows remote attackers to bypass authentication and gain administrative access via a certain value of the adminlog cookie...

AsePe Haber 1.1 SQL Injection

Application Name : AsePe Haber v1.1 Vulnerable Type : SQL Injection Google Keyword : AsePe Haber v1.1 Infection : Ynetici bilgileride dahil olmak üzere veritabanındaki tüm verilere erişim sağlanabilir. Elde edilen Ynetici şifresi ile sisteme giriş yapılarak haber vb. içerik eklemek suretiyle ilgi...

Jevonweb Guestbook Administrative Access

Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook" "http://www.jevonweb.f2s.com/"...

Jax Calendar 1.34 - Remote Admin Access

Jax Calendar 1.34 - Remote Admin Access Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34...

Jax Calendar 1.34 Remote Admin Access Exploit

Exploit for unknown platform in category web applications ============================================= Jax Calendar 1.34 Remote Admin Access Exploit ============================================= Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora...

Jax Calendar 1.34 Remote Admin Access Exploit

No description provided by source. Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34 Remote...

Jax Calendar 1.34 - Remote Admin Access

Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34 Remote Admin Access Exploit Author: Sora...

Jevonweb Guestbook Remote Admin Access Exploit

Exploit for unknown platform in category web applications ============================================== Jevonweb Guestbook Remote Admin Access Exploit ============================================== Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux...

Jevonweb Guestbook Remote Admin Access Exploit

No description provided by source. Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook"...

Jevonweb Guestbook - Remote Admin Access

Jevonweb Guestbook - Remote Admin Access Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook"...

Jevonweb Guestbook - Remote Admin Access

Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook" "http://www.jevonweb.f2s.com/"...

BOLDfx eUploader 3.1.1 - 'admin.php' Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/41783/info BOLDfx eUploader is prone to multiple remote vulnerabilities, including a cross-site request-forgery vulnerability, a security-bypass vulnerability, and an HTML-injection vulnerability. Attacker-supplied HTML and script code could run in the...

Viscacha 0.8 Gold - Persistent Cross-Site Scripting

Viscacha 0.8 Gold - Persistent Cross-Site Scripting Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed...

Viscacha 0.8 Gold Cross Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...

Robert Zimmerman PHP / MYSQL Scripts Admin Bypass

No description provided by source. --------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPTS ADMIN BYPASS - --------------------------------------------------- EXPLOIT : Login : '-' Pass : '-' And u Got admin acces ; / hakerzy ze szkocji ;...

Robert Zimmerman PHP MySQL Scripts - Authentication Bypass

Robert Zimmerman PHP MySQL Scripts - Authentication Bypass --------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPTS ADMIN BYPASS - --------------------------------------------------- EXPLOIT : Login : '-' Pass : '-' And u Got admin acces ; / hakerzy ze szkocji ;...

PHP / MYSQL Scripts Admin Bypass

Exploit for unknown platform in category web applications ================================================= Robert Zimmerman PHP / MYSQL Scripts Admin Bypass ================================================= --------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPT...

OS Commerce 2.2r2 - Authentication Bypass

OS Commerce 2.2r2 - Authentication Bypass When this hole was brought to our attention, we were amazed to find that it seems nobody has caught it yet!! There is a page in the admin that can be access without login AND can pass parameters!! /admin/mail.php/login.php /admin/mail.php/login.php?fooled...

Time Warner Router Flaw Exposes Customers

There’s a rudimentary vulnerability in a cable modem/wireless router installed in tens of thousands of homes by Time Warner that could enable an attacker to get full access to the router quite easily. The vulnerability, which was discovered and disclosed recently by a blogger named David Chen, is...

CVE-2009-3596

JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to bypass authentication and gain administrative access via a direct request...