284 matches found
CVE-2012-2326
MyBB Admin Control Panel (ACP) contains a Cross-site Scripting (XSS) vulnerability (CVE-2012-2326) affecting
abcms 1.0 app/controller/admincp.php登录绕过漏洞
No description provided by source...
Directory Traversal Vulnerability in 1024cms Admin Control Panel v1.1.0 Beta (Complete-Modules Package)
============================================================================================================= 1024cms Admin Control Panel v1.1.0 Beta Complete-Modules Package - Directory Traversal Vulnerability...
LFI Vulnerability in 1024cms Admin Control Panel v1.1.0 Beta (Master-cPanel Package)
========================================================================================================== 1024cms Admin Control Panel v1.1.0 Beta Master-cPanel Package - Local File Include Vulnerability...
1024cms ACP 1.1.0 Complete Modules Local File Inclusion
============================================================================================================= 1024cms Admin Control Panel v1.1.0 Beta Complete-Modules Package - Local File Include Vulnerability...
1024cms ACP 1.1.0 Master-cPanel Cross Site Scripting
============================================================================================================ 1024cms Admin Control Panel v1.1.0 Beta Master-cPanel Package - Cross-Site Scripting Vulnerability...
1024cms ACP 1.1.0 Complete Modules Directory Traversal
============================================================================================================= 1024cms Admin Control Panel v1.1.0 Beta Complete-Modules Package - Directory Traversal Vulnerability...
Nwahy Web Site Dir 2.2 Database Disclosure Exploit
Exploit for php platform in category web applications ================================================== Nwahy Web Site Dir 2.2 Database Disclosure Exploit ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...
vBulletin - Critical Information Disclosure
Versions Affected: 3.8.6 Only! Info: Content publishing, search, security, and more—vBulletin has it all. Whether it’s available features, support, or ease-of-use, vBulletin offers the most for your money. Learn more about what makes vBulletin the choice for people who are serious about creating...
vBulletin 3.8.6 Credential Disclosure
Versions Affected: 3.8.6 Only! Info: Content publishing, search, security, and morevBulletin has it all. Whether its available features, support, or ease-of-use, vBulletin offers the most for your money. Learn more about what makes vBulletin the choice for people who are serious about creating...
CustomCMS Gaming Portal 4.5.8.2 Cross Site Scripting / Shell Upload
PLz chk it Exploit Title: XSS and shell upload Vulnerability in CustomCMS Gaming Portal V.4.5.8.2 Date: 25-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : ------------------------------------------------------------------------------------------------------------------ XSS and shell...
NinkoBB 1.3RC4 Change Admin and Add New Admin CSRF Vulnerability
Exploit for unknown platform in category web applications ================================================================ NinkoBB 1.3RC4 Change Admin and Add New Admin CSRF Vulnerability ================================================================ change admin user,passwd & add new admin use...
ActiveCampaign 1-2-All Broadcast Email 4.0 7 SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================================================== ActiveCampaign 1-2-All Broadcast Email Admin Control Panel Username SQL Injection Vulnerability...
NinkoBB 1.3RC4 Cross Site Request Forgery
change admin user,passwd & add new admin user exploit Author: ItSecTeam download from:http://ninkobb.com/releases/?NinkoBB-1.3RC4.zip script:NinkoBB 1.3RC4 update:2010 ----------------------------------------- xpl: coded by ahmadbady Admin Control Panel - Editing User Username Settings banned...
phpBazar 'classified.php' SQL Injection Vulnerability
The host is running phpBazar and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbphpbazarsqlinjvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ phpBazar 'classified.php' SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities
No description provided by source. ------------------------------------------------------------------------------------------------- Title: Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.comhttp://gmail.com Date: 11. December 2009...
Chipmunk Board Script 1.x - Multiple Cross-Site Request Forgery Vulnerabilities
Chipmunk Board Script 1.x - Multiple Cross-Site Request Forgery Vulnerabilities ------------------------------------------------------------------------------------------------- Title: Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.co...
Design/Logic Flaw
Harold Bakker's NewsScript HB-NS 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to admin.php...
CVE-2009-4262
HB-NS NewsScript 1.3 is affected by CVE-2009-4262, where remote attackers can obtain access to the admin control panel by making a direct request to admin.php. The vulnerability is described in multiple sources (NVD) with a CVSS v2 base score of 7.5 (HIGH) and an attack vector of NETWORK, requiri...
CVE-2009-4222
phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...