CVE-2009-4222

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

Design/Logic Flaw

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

CVE-2009-4222

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

phpBazar 2.1.1fix Remote Administration-Panel Vulnerability

Exploit for unknown platform in category web applications =========================================================== phpBazar-2.1.1fix Remote Administration-Panel Vulnerability =========================================================== =======================================================...

phpBazar-2.1.1fix - Remote Administration-Panel

phpBazar-2.1.1fix - Remote Administration-Panel phpBazar-2.1.1fix Remote Administration-Panel Vulnerability Found by? :? kurdish hackers team C0ntact : pshela at YaHoo .com ?????????????????? Groups : Kurd-Team site?? : www.kurdteam.org =======================================================...

phpBazar-2.1.1fix Remote Administration-Panel Vulnerability

No description provided by source. phpBazar-2.1.1fix Remote Administration-Panel Vulnerability ! Found by? :? kurdish hackers team ! C0ntact : pshela at YaHoo .com ?????????????????? ! Groups : Kurd-Team ! site?? : www.kurdteam.org =======================================================...

Arab Portal 2.2 SQL Injection

Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Codes TeaM...

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Cod...

Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Arab Portal 2.2 Auth Bypass Remote SQL Injection Vulnerability ================================================================ Script Name : Arab portal 2.2 Remote Auth SQL...

New5starRating 1.0 - '/admin/control_panel_sample.php' SQL Injection

source: https://www.securityfocus.com/bid/34680/info New5starRating is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC

Exploit for unknown platform in category web applications =============================================== Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC =============================================== Limbo cms v 1042Lt Cross-site request forgery Privilege Escalation Proof of Concept by Alfons...

CVE-2008-4245

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to 1 change a user's privileges, 2 delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the...

Design/Logic Flaw

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to 1 change a user's privileges, 2 delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the...

CVE-2008-4245

The CVE-2008-4245 entry concerns the Admin Control Panel of Rianxosencabos CMS 0.9, which does not require administrator privileges. This allows remote authenticated users to perform administrative actions (e.g., change a user's privileges, delete a user account) via vectors involving an admin li...

Rianxosencabos CMS 0.9 - Arbitrary Add Admin

Rianxosencabos CMS 0.9 - Arbitrary Add Admin ============================================================ Rianxosencabos CMS 0.9 Arbitrary Add-Admin Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CW...

Rianxosencabos CMS 0.9 - Arbitrary Add Admin

============================================================ Rianxosencabos CMS 0.9 Arbitrary Add-Admin Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

paranews-xss.txt

Author : Xylitol Contact : n/a Vendor : s0nic www.monxoom.de Version: 3.4 D0rks : Powered by Paranews 3.4 Public release vulnz: 10/09/08 Impact: low Stop lammer 1. Description: Auf den Namen »ParaNews« habe ich mein Newsscript getauft, welches zur Pflege eines Newsbereich in einer Website gedacht...