572 matches found
Design/Logic Flaw
The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to 1 change a user's privileges, 2 delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the...
CVE-2008-4245
The CVE-2008-4245 entry concerns the Admin Control Panel of Rianxosencabos CMS 0.9, which does not require administrator privileges. This allows remote authenticated users to perform administrative actions (e.g., change a user's privileges, delete a user account) via vectors involving an admin li...
CVE-2008-4245: Undefined Security Weakness
The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to 1 change a user's privileges, 2 delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the...
Rianxosencabos CMS 0.9 - Arbitrary Add Admin
Rianxosencabos CMS 0.9 - Arbitrary Add Admin ============================================================ Rianxosencabos CMS 0.9 Arbitrary Add-Admin Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CW...
Rianxosencabos CMS 0.9 - Arbitrary Add Admin
============================================================ Rianxosencabos CMS 0.9 Arbitrary Add-Admin Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
paranews-xss.txt
Author : Xylitol Contact : n/a Vendor : s0nic www.monxoom.de Version: 3.4 D0rks : Powered by Paranews 3.4 Public release vulnz: 10/09/08 Impact: low Stop lammer 1. Description: Auf den Namen »ParaNews« habe ich mein Newsscript getauft, welches zur Pflege eines Newsbereich in einer Website gedacht...
IceBB <= 1.0-RC9.2 Blind SQL Injection / Session Hijacking Exploit
Exploit for unknown platform in category web applications ================================================================== IceBB = 1.0-RC9.2 Blind SQL Injection / Session Hijacking Exploit ================================================================== Author: GiReX 26/07/08 Homepage:...
IceBB 1.0-RC9.2 - Blind SQL Injection Session Hijacking
IceBB 1.0-RC9.2 - Blind SQL Injection Session Hijacking Author: GiReX 26/07/08 Homepage: girex.altervista.org CMS: IceBB ...
mforum-admin.txt
================================================= MFORUM 0.1a Arbitrary Add-Admin Vulnerability ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------|...
Maian Scripts Cookie Manipulation Authentication Bypass
The remote host is running at least one PHP application from Maian Script World that allows a remote attacker to bypass authentication and access the admin control panel by simply setting a special cookie. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index
====================================================================== Advisory : XSS in modcp index Release Date : June 17th 2008 Application : vBulletin Version : vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors : Jessic...
Cross site scripting
Cross-site scripting XSS vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors and an "obscure method." NOTE: the vector is probably in the redirect parameter to the Admin Control Panel admincp/index.php...
Anata CMS 1.0b5 (change.php) Arbitrary Add Admin Vulnerability
No description provided by source. =============================================== Anata CMS 1.0b5 Arbitrary Add-Admin Exploit =============================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
anatacms-admin.txt
=============================================== Anata CMS 1.0b5 Arbitrary Add-Admin Exploit =============================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | /...
Anata CMS 1.0b5 (change.php) Arbitrary Add Admin Vulnerability
Exploit for unknown platform in category web applications ============================================================== Anata CMS 1.0b5 change.php Arbitrary Add Admin Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||...
Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10)
====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...
vbulletin-xss.txt
====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...
IPTBB 0.5.6 Arbitrary Add-Admin Exploit
No description provided by source. ========================================= IPTBB 0.5.6 Arbitrary Add-Admin Exploit ========================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
PHPEasyData 1.5.4 - adminlogin.php?Username SQL Injection
PHPEasyData 1.5.4 - adminlogin.php?Username SQL Injection source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site...
IPTBB 0.5.6 Arbitrary Add-Admin Exploit
Exploit for unknown platform in category web applications ======================================= IPTBB 0.5.6 Arbitrary Add-Admin Exploit ======================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...