6990 matches found
X10Media Mp3 Search Engine < 1.6.2 Admin Access Vulnerability
No description provided by source. THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER t4hathotmail.fr File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin headerLocation: ../main.ph...
statcountex 3.1 - Multiple Vulnerabilities
No description provided by source. Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34 Version: 3.1 Tested on: Windows xp sp3 ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ / /| ' \ | | | | | | / | | | | | | | | | || || ||||...
easycms <= 0.4.2 - Multiple Vulnerabilities
No description provided by source. --==+================================================================================+==-- --==+ easyCMS = 0.4.2 Multiple Remote Vulnerabilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8u...
XtremeASP PhotoGallery 2.0 Adminlogin.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9438/info XtremeASP PhotoGallery is prone to an SQL injection vulnerability. The issue is reported to exist in the administration login interface, which does not sufficiently sanitize user-supplied input for username and...
aradblog - Multiple Vulnerabilities
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub10-aradblog-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : aradBlog Multiple...
DigitalHive <= 2.0 RC2 (user_id) Remote SQL Injection Exploit
No description provided by source. !-- Hive v2.0 RC2 Remote SQL Injection c0ded by j0j0 -- html head style type=text/css body margin:3%; font-size:10px; color:FFFFFF; font-family:Verdana,Arial; background-color:1a1a1a; text-align: center; input background:303030; color:FFFFFF;...
Ruby on Rails <= 2.3.5 'protect_from_forgery' Cross Site Request Forgery Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37322/info Ruby on Rails is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions, gain unauthorized access to the affected...
Pandora FMS <= 3.1 Authentication Bypass
No description provided by source. + Introduction Pandora FMS for Pandora Flexible Monitoring System is a software solution for monitoring computer networks. It allows monitoring in a visual way the status and performance of several parameters from different operating systems, servers, applicatio...
ArcadeBuilder Game Portal Manager 1.7 - Remote SQL Injection Vuln
No description provided by source. --==+================================================================================+==-- --==+ Game Portal Manager v1.7 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...
RV Article Publisher CSRF Vulnerability
No description provided by source. Exploit Title: RV Article publisher CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin html body onload=document.form0.submit; form method=POST name=form0...
Phil's Bookmark Script Admin.PHP Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17878/info Phil's Bookmark script is prone to an authentication-bypass vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. An attacker can exploit this issue to bypa...
WAnewsletter 2.1.2 - SQL Injection Vulnerability
No description provided by source. ================================================ WAnewsletter v 2.1.2 SQL Injection Vulnerability ================================================ Exploit Title: WAnewsletter v 2.1.2 SQL Injection Vulnerabilitie Date: 23/09/2010 Author: BrOx-Dz Author:...
ONECMS 2.5 - SQL Injection Vulnerability
No description provided by source. Exploit Title: ONECMS v2.5 SQL INJECTION Date: 05.03.2010 Author: Ctacok and .:melkiy:. Software Link: http://sourceforge.net/projects/onecms/ Version: 2.5 Tested on: Ubuntu 9.10 Apache2+PHP5 !/usr/bin/perl use LWP::Simple; print \n; print \n; print ONECMS v2.5...
CcMail <= 1.0.1 Insecure Cookie Handling Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ CcMail = 1.0.1 Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...
PHPortfolio SQL Injection Vulnerbility
No description provided by source. Exploit Title: SQL Injection Vulnerbility in PHP Portfolio Google Dork: Powered by PHPortfolio Date: 23/5/2011 Author: lionaneesh Software Link: http://outshine.com/phportfolio/ http://www.outshine.com/software/phportfolio/intro.php Risk Level : High A hacker ca...
Billwerx RC 3.1 - Multiple Vulnerabilities
No description provided by source. Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context o...
realm cms <= 2.3 - Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...
ActiveKB <= 1.5 Insecure Cookie Handling/Arbitrary Admin Access
No description provided by source. --==+================================================================================+==-- --==+ ActiveKB = 1.5 Insecure Cookie Handling/Arbitrary Admin Access +==-- --==+================================================================================+==--...
SendCard <= 3.4.0 Unauthorized Administrative Access Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo SendCard = 3.4.0 unauthorized administrative access / remote commands\n; echo execution exploit\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; echo dork: \Powered by sendcard - an...
Greatclone GC Auction Platinum 'category.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30389/info GC Auction Platinum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...