CVE-2009-3168

CVE-2009-3168 affects Mevin Productions Basic PHP Events Lister 2.0. The vulnerability arises from improper access restriction to admin/reset.php and admin/user_add.php, allowing remote authenticated users to reset administrative passwords or add administrators via a direct request. Multiple conn...

Php168 v6 mention the right vulnerability-vulnerability warning-the black bar safety net

? php printr' +---------------------------------------------------------------------------+ Php168 v6. 0 update user access exploit +---------------------------------------------------------------------------+ '; / works regardless of php. ini settings / if $argc 5 printr'...

CVE-2008-7155

NetRisk 1.9.7 does not properly restrict access to admin/changesubmit.php, which allows remote attackers to change the password of arbitrary users via a direct request...

DVBBS php v2.0 boardrule.php注入漏洞

PHP2.0＋＋功能介绍： 一、 断点数据库备份，保持所备份的数据和论坛数据同步； 二、 多种形式Url rewrite 伪静态，提高SEO； 三、 多线程信息采集，减少人工操作繁琐度； 四、 自动升级采用多线程断点续传PHP下载模块； 五、 国际论坛界中独创了一个文件安装论坛； 六、 创新、贴心的新发贴回贴模式正在启用---动网PHP2.0++再创佳绩； 七、 发挥PHP优点，大量采用成熟的缓存机制 八、 全优的后台搜索功能； 九、 用户体验 boardrule.php存在sql注入漏洞。 DVBBS php v2.0 暂无 http://p.dvbbs.net/...

CVE-2008-7124

zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allows remote attackers to gain administrator privileges via a direct request, as demonstrated by adding a new administrator...

Naroun ADSL-Tools Bypass

www.Ostoure.com | | Ostoure Security Research Team | | Title: Naroun ADSL-Tools authentication Bypass | Vendor: http://www.mixoftix.net | Exploitation: Remote with browser ==================== - Description: ==================== The data in the admin folder "operator" can be accessed via a normal...

new vulnerability founded by ostoure

www.Ostoure.com | | Ostoure Security Research Team | | Title: Naroun ADSL-Tools authentication Bypass | Vendor: http://www.mixoftix.net | Exploitation: Remote with browser ==================== - Description: ==================== The data in the admin folder "operator" can be accessed via a normal...

Allomani Mobile 2.5 - Blind SQL Injection

Allomani Mobile 2.5 - Blind SQL Injection ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Allomani Mobile v2.5 /QQQ/\QQQ\ Blind SQL inj. exploit /QQQQQ/ \QQQQQQ\ q GET 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://allomani.com |QQQQ/ By Qaband...

ZenPhoto Gallery 1.2.5 Admin Password Reset (CRSF)

Exploit for unknown platform in category web applications ================================================== ZenPhoto Gallery 1.2.5 Admin Password Reset CRSF ================================================== ?php Zen Photo Adminstrator Password Steal/Reset Exploit...

ZenPhoto Gallery 1.2.5 - Admin Password Reset (Cross-Site Request Forgery)

ZenPhoto Gallery 1.2.5 - Admin Password Reset Cross-Site Request Forgery ?php Zen Photo Adminstrator Password Steal/Reset Exploit +================================================================+ Discovered and coded by petros at dusecurity.com...

YourTube 2.0 - Arbitrary Database Disclosure

YourTube 2.0 - Arbitrary Database Disclosure exploit : YourTube info : http://www.ac4p.com //= DORK: "powered by yourtube" //= found by: Security Code Team - thanks for sniper code and Qabandi -- //= our home: WwW.Sec-Code.com //= greats 4 our members in our home -- /// // - Upload this file to...

TekBase All-in-One 3.1 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= TekBase All-in-One 3.1 Multiple SQL Injection Vulnerabilities ============================================================= Author: n3wb0ss Date: 15/06/09 Software: TekBase...

mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities

mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities MRCGIGUY The Ticket System 2.0 PHPid Multiple Remote Vulnerabilities Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.mrcgiguy.com Special Thx: All Muslims All Members Of Team Algerien Of FootBall Note:...

CVE-2009-1582

CVE-2009-1582 affects Million Dollar Text Links 1.0. The vulnerability allows a remote attacker to bypass access restrictions by directly requesting admin.home.php after visiting admin.php, enabling privilege escalation. The root cause is improper access control around admin.home.php. Public refe...

Server side request forgery (ssrf)

Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to obtain the administrator login name and password via a direct request...

X10Media MP3 Search Engine Admin Access

THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so displ...

X10Media Mp3 Search Engine 1.x Admin Access Vulnerability

No description provided by source. THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER t4hathotmail.fr File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location:...

X10Media Mp3 Search Engine < 1.6.2 Admin Access Vulnerability

Exploit for unknown platform in category web applications ============================================================= X10Media Mp3 Search Engine isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so display all forms. / ---------------------------------------- if the...

X10Media Mp3 Search Engine &lt; 1.6.2 Admin Access Vulnerability

No description provided by source. THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER t4hathotmail.fr File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location:...

X10media Mp3 Search Engine 1.6.2 - Admin Access

X10media Mp3 Search Engine 1.6.2 - Admin Access THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location: ../main.php"...