SN News <= 1.2 (/admin/loger.php) Admin Bypass SQL Injection

Exploit for php platform in category web applications SN News Date: 06/06/2012 Version: 1.2 Software Link: http://phpbrasil.com/script/JHnpFRmSBqlf/sn-news ISRAEL Author will be not responsible for any damage. Vulnerable Code - /admin/logar.php 4-15: 4.$login = $POST"login"; 5.$senha =...

Jibberbook 2.3 Administrative Bypass

Exploit Title : jibberbook Bypass Admin Vulnerability Author : IrIsT.Ir & Sec4Ever.com Discovered By : L3b-r1'z Home : http://IrIsT.Ir & http://Sec4Ever.com P Blob : http://L3b-r1z.com/ Software Link : http://jibberbook.com/ Security Risk : High Version : 2.3 Tested on : win\XP Dork : allintext:...

EditWRX CMS Remote Code Execution

.----.| |--.||.-----.-----.--.--.| | | | | | | || || || | | | | | || | | | |||||||| | | ||||| || |||||| VULN EditWRX CMS Remote Code Execution + Admin Bypass Zero Day NFO EditWRX is vulnerable to remote code execution through mishandling of open in the downloader, which can read in piped commands...

Seotoaster 1.9 SQL Injection

Advisory: Seotoaster SQL-Injection Admin Login Bypass Advisory ID: INFOSERVE-ADV2011-06 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Seotoaster v.1.9 Vendor URL: http://www.seotoaster.com/ Vendor Status: fixed ==========================...

WebDirector SQL Injection / Administrative Bypass

WEBDIRECTOR SQL & Admin ByPass Vulnerabilities WebDirector is a dynamic, self managed website solution with everything your business needs. CMS Vendor: http://www.corporateinteractive.com.au/ Demo: http://demo.webdirector.net.au/ Credit: DoZ 1. WYSIWIG Editor Admin ByPass WYSIWIG Editor Pages Not...

Easy Hosting Control Panel - Admin Authentication Bypass

Exploit Title: Easy Hosting Control Panel Admin Auth Bypass Google Dork: inurl:/ehcp/?op=applyfordomainaccount Date: 10/04/2011 Author: Jasman Software Link: https://launchpad.net/ehcp & http://www.ehcp.net Version: 0.29.10 - 0.29.13 Tested on: Ubuntu, Debian + Description Easy Hosting Control...

Calisto light, light plus and full, Sql Injection And user or Admin bypass

Calisto light, light plus and full, Sql Injection And user or Admin bypass Vendor URL: http://www.calistosoft.com.ar/ Advisore: http://lostmon.blogspot.com/2011/08/calisto-light-light-plus-and-full-sql.html Vendor notify: YES exploit available: YES Vulnerability Description Calisto Light, Light...

Calisto Light / Light Plus / Full SQL Injection

Calisto light, light plus and full, Sql Injection And user or Admin bypass Vendor URL: http://www.calistosoft.com.ar/ Advisore: http://lostmon.blogspot.com/2011/08/calisto-light-light-plus-and-full-sql.html Vendor notify: YES exploit available: YES Vulnerability Description Calisto Light, Light...

PlanetComnet SQL Injection

Exploit Title: PlanetComnet Admin Auth Bypass Date: 14 June 2011 Author: CriminalCoder Category: WebApps Software Link: www.planetcomnet.in Dork: inurl:admin.asp "Designed & Hosted by PlanetComnet" Tested on: Windows Xp SP3 Home: beyz4de.wordpress.com + Default admin panel:...

NetworkManager: Did not honour PolicyKit auth_admin action element by creation of Ad-Hoc wireless networks

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

Vitaminedz Blind SQL-i Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Powered By Nilson Solution SQL Injection

Exploit Title: SQL Injection Admin Bypass exploit Date: 08/02/2011 Author: eXeSoul Author Mail: [email protected] Vendor: www.nilson-solution.com Live Demo: www.mehtasoft.com/admin/ category: SQL Injection Version: WebApps Tested on: Windows VCE:...

PHP Hosting Directory 2.0 Insecure Cookie

----------------------------------------------------------------------- o X .@% @@@ @ @ @@ %X X@ @ @X% @X% X@ X@ o@ o X o @ % % X @ X X X@ X X % @o @%o @o% X @ % X.@@ o @o@ @ @XX X@ @ X @% X% %@@ X -----------------------------------------------------------------------...

Jax Calender admin bypass vulnerability

Exploit for php platform in category web applications ======================================= Jax Calender admin bypass vulnerability ======================================= Exploit Title: Jax Calender admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software Link:...

Jax Guestbook admin bypass vulnerability

Exploit for php platform in category web applications ======================================== Jax Guestbook admin bypass vulnerability ======================================== Exploit Title: Jax Guestbook admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software...

CVE-2009-4987

admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a different vector than CVE-2008-3211...

El-Thna2ya Links Manager SQL Injection / Cross Site Request Forgery

Exploit Title : El-Thna2ya Links Manager Multiple Vulnerabilities Date : 20 - 6 - 2010 Author : S.W.T Software Link : http://www.mediafire.com/?mjjfjmyzmej Version : All Versions Tested on : Linux Home : WwW.SeC-WaR.CoM -== SQL Injection Vulenrability ==- http://www.site.com/path/go.php?id=SQL1...

PageDirector CMS - Multiple Vulnerabilities

Exploit Title : PageDirector CMS Multiple Vulnerabilities Date : 20 - 6 - 2010 Author : Tr0y-x Vendor : www.customerparadigm.com Version : All Versions Tested on : Linux Home : WwW.SeC-WaR.CoM Price : 675.00 $ loooooolz -== SQL Injection Vulenrability ==- PageDirector Script Contains A SQL...

OSCommerce Online Merchant 2.2 Shell Upload

| \ | | | | | |/ / | | | | | // \ \ / / | | | | | | |/ | ' \ | |\ \ /\ V / | | || | || | | | | | | \| / /||,|||/|| || | | | || | | | | |/' || || | | |/ / | ' \ | /| |\ | | | / | | | | | | | \ |/ /./ / /|,|| || || / / DEFACEMENT it's for script kiddies... $ Exploit Title : Oscommerce...

osCommerce Online Merchant 2.2 - File Disclosure Authentication Bypass

osCommerce Online Merchant 2.2 - File Disclosure Authentication Bypass -------------------------------------------- Oscommerce Online Merchant v2.2 File Disclosure And Admin ByPass -------------------------------------------- Author : Flyff666 Date : May, 30, 2010 Location : Tangerang, Indonesia...