CVE-2009-4262

HB-NS NewsScript 1.3 is affected by CVE-2009-4262, where remote attackers can obtain access to the admin control panel by making a direct request to admin.php. The vulnerability is described in multiple sources (NVD) with a CVSS v2 base score of 7.5 (HIGH) and an attack vector of NETWORK, requiri...

CVE-2009-4222

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

Design/Logic Flaw

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

CVE-2009-4222

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

CVE-2009-4112

Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - Get Memory Usage" setting to contain arbitrary commands...

phpBazar 2.1.1fix Remote Administration-Panel Vulnerability

Exploit for unknown platform in category web applications =========================================================== phpBazar-2.1.1fix Remote Administration-Panel Vulnerability =========================================================== =======================================================...

phpBazar-2.1.1fix - Remote Administration-Panel

phpBazar-2.1.1fix - Remote Administration-Panel phpBazar-2.1.1fix Remote Administration-Panel Vulnerability Found by? :? kurdish hackers team C0ntact : pshela at YaHoo .com ?????????????????? Groups : Kurd-Team site?? : www.kurdteam.org =======================================================...

phpBazar-2.1.1fix Remote Administration-Panel Vulnerability

No description provided by source. phpBazar-2.1.1fix Remote Administration-Panel Vulnerability ! Found by? :? kurdish hackers team ! C0ntact : pshela at YaHoo .com ?????????????????? ! Groups : Kurd-Team ! site?? : www.kurdteam.org =======================================================...

WordPress Plugin My Category Order <= 2.8 SQL Injection Vulnerability

No description provided by source. Source: WordPress Plugin: My Category Order = 2.8 mycategoryorder.php / SQL Injection Vulnerability Download: http://wordpress.org/extend/plugins/my-category-order/ No Dork Author: ManhLuat93 at hcegroupdotnet Errors appears only when you have admin control Open...

WordPress Plugin My Category Order 2.8 - SQL Injection

WordPress Plugin My Category Order 2.8 - SQL Injection Source: WordPress Plugin: My Category Order = 2.8 mycategoryorder.php / SQL Injection Vulnerability Download: http://wordpress.org/extend/plugins/my-category-order/ No Dork Author: ManhLuat93 at hcegroupdotnet Errors appears only when you hav...

Arab Portal 2.2 SQL Injection

Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Codes TeaM...

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Cod...

Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Arab Portal 2.2 Auth Bypass Remote SQL Injection Vulnerability ================================================================ Script Name : Arab portal 2.2 Remote Auth SQL...

New5starRating 1.0 - '/admin/control_panel_sample.php' SQL Injection

source: https://www.securityfocus.com/bid/34680/info New5starRating is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC

Exploit for unknown platform in category web applications =============================================== Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC =============================================== Limbo cms v 1042Lt Cross-site request forgery Privilege Escalation Proof of Concept by Alfons...

CVE-2008-4245

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to 1 change a user's privileges, 2 delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the...

Design/Logic Flaw

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to 1 change a user's privileges, 2 delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the...