truegalerie.txt

Informations : °°°°°°°°°°°°°° Language : PHP Website : http://www.truelogik.net Version : 1.0 Problems : - Admin Access - File Copy PHP Code/Location : °°°°°°°°°°°°°°°°°°° verifadmin.php, checkadmin.php : ------------------------------------------------------------------------ "; echo ""; echo...

Admin access in GuestBook r4

Product: GuestBook Version: release 4 OffSite: http://www.lasource.r2.ru/ Problem: Admin access -------------------------------------- You may use admin panel. Get the password there: http://target/cgi-bin/guestbook/passwd The password don't crypt : Contacts: www.overg.com www.dwcgr0up.com...

Disclosing information in Super GuestBook

Product: Super GuestBook Version: 1.0 OffSite: http://www.lasource.r2.ru/ Problem: Disclosing information ----------------------------------------- View file http://target/cgi-bin/SGBDIR/superguestconfig and you view configuration of the Super guestbook. View "Password" field and you view passwor...

CVE-2002-0494

The CVE-2002-0494 entry describes a Cross-site scripting vulnerability in WebSight Directory System 0.1 that lets remote attackers execute arbitrary JavaScript and potentially gain access to the WebSight administrator via a link submission containing the script in a website name. Affected compone...

hwdeGUEST

Product : hwdeGUEST Version : 2.0 WebSite : http://hwde.de Problem : Admin access rus Description: ------------ var.dat: ======== ... //Your username $benutzername="hwde"; //Your password $benutzerpasswort="SOFT"; ... ========= Exploit: -------- http://somehost/guestbook/var.dat Contacts: -------...

Beanwebb's Guestbook 1.0 Multiple Vulnerabilities

The remote host is running Beanwebb's Guestbook. This set of CGIs has two vulnerabilities : - Anyone can access the admin page admin.php - It is vulnerable to cross-site scripting attacks in add.php An attacker may use these flaws to steal the cookies of your users or to inject fake information i...

Beanwebb Guestbook v1.0 vulnerabilities

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: Beanwebb Guestbook v1.0 vulnerabilities product: Beanwebb Guestbook v1.0 vendor: http://www.adam.orientfans.co.uk risk: high date: 03/29/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/016.en.txt...

WFGuestBook

Product : WFGuestBook Version : 1.1 WebSite : http://jid.2yd.ru Problem : Admin access rus Description: ------------ index.php ========= ... require "style.php"; require "lib.php"; $cr=chr13.chr10; $ap=file"pwd.dat"; ... ========= pwd.dat ======= 21232f297a57a5a743894a0e4a801fc3 ======= password ...

Sad-Raven GuestBook

Product : Sad-Raven GuestBook Version : 1.1 WebSite : http://www.sad-raven.ru Problem : Admin access rus Description: ------------ Если посмотреть файл admin.php, можно увидеть следующие строки: admin.php ========= ... if fileexists"passwd.dat" && $QUERYSTRING != "": require "passwd.dat";...

WFVote

Product : WFVote Version : 0.2 WebSite : http://jid.2yd.ru Problem : Admin access rus Description: ------------ setadmpw.php ========= ... myflock; $f=fopen"votepwd.dat","w"; fputs$f,md5$admpwd1; fclose$f; myfunlock; ... ========= votepwd.dat ======= 21232f297a57a5a743894a0e4a801fc3 =======...

WF-Chat

Product : WF-Chat Version : 1.0 Beta WebSite : http://jid.2yd.ru Problem : Viewing users account. Description: ------------ For own a admin accsess in this chat u'r needing view files: Inicks.txt !pwds.txt In short, all informations about registered users be at this files And access for reading...

CVE-2002-1410

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to 1 delete entries via direct access of admin.cgi, or 2 reconfigure Guestbook via direct access of config.cgi...

Myguestbook (PHP)

Informations : °°°°°°°°°°°°°° Version : 3.0 Website : http://www.tefonline.net/ Problems : - XSS - admin infos recovery - Access to admin pages PHP Code/Location : °°°°°°°°°°°°°°°°°°° If pseudo = SCRIPT, e-mail = SCRIPT or message = /textareaSCRIPT SCRIPT will be executed on index.php,...

PHPMyPub (PHP)

Informations : °°°°°°°°°°°°°° Website : http://phpmypub.free.fr Version : 1.2.0 Problem : Admin access PHP Code/Location : °°°°°°°°°°°°°°°°°°° admin/index.php : ------------------------------------------------------------------------ ... $auth = $HTTPCOOKIEVARS"adminpub"; if !$auth if $formulaire...

SQL Injection in COMMUNITY WIZARD PORTAL

Author : MaskNBTA Vendor : http://www.commwiz.com/ Version : maybe all version Problem : Admin access Security : high Date : 16/12/2002 Exploit : In login page : LOGIN : ' OR ''=' PASS : ' OR ''=' You ' re administrator . You can do anything you want . Regards [email protected] Member of HVA -...

MyPHPSoft MyPHPLinks 2.1.9/2.2 - SQL Injection Administration Bypassing

source: https://www.securityfocus.com/bid/6395/info MyPHPLinks is a freely available, open source PHP application distributed by MyPHPSoft. It is available for Unix, Linux, and Microsoft Windows operating systems. It has been reported that a problem with the checking of input by MyPHPLinks exists...

gBook

Informations : °°°°°°°°°°°°°° Language : PHP Tested version : 1.4 Problem : Admin access PHP Code : °°°°°°°°°° /gb/index.php : ------------------------------------------------------ ?php include"config.inc.php"; if$action == "login" if$user == $loginu && $pw == $loginpw setcookie"login", "true",...

SSGbook (ASP)

Informations : °°°°°°°°°°°°°° Product : SSGbook Langage : ASP Tested version : 1 Website : http://www.script-shed.com Problem : Cross Site Scripting PHP Code / location : °°°°°°°°°°°°°°°°°°°°° ----------------- config.asp ---------------------- fString = doCodefString, "img","/img","img src=""","...

CGIscript.net - csNews.cgi - Multiple Vulnerabilities

CGIscript.net - csNews.cgi - Multiple Vulnerabilities --------------------------------------------------------------------- Date : June 11, 2002 Product : csNews.cgi csNews standard csNews.cgi csNews Pro Vendor : WWW.CGIscript.NET, LLC. Homepage : http://www.cgiscript.net/ DISCUSSION:...

Security holes : Rose, EasyNews, User Online, Mon Album, KorWebLog

Hello people : Product 1 : Rose http://www.jinxm.co.uk Version : 4.52 Problem : - Admin access Exploit : - newsadmin/upload.php?userinfousername=hop&userinfouserlevel=100 Product 2 : EasyNews http://www.webrc.ca Version : 4.3 Problem : - Admin access Exploits : - admin.php?enlogid=0&action=users ...