FubarForum 1.6 - Arbitrary Authentication Bypass

FubarForum 1.6 - Arbitrary Authentication Bypass in the name of god ..:: [email protected] ::.. Tanx from : Expl0its Script : FubarForum Version : 1.6 Dork : "Powered by FubarForum v1.6" /forum/index.php?page=admin milw0rm.com 2008-12-28...

Click&BaneX - Multiple SQL Injections

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Click&BaneX download : null Demo : http://icash.ch/ClickAndBanexDemo/user/ %00 http://icash.ch/ClickAndBanexDemo/admin/ Exploits :...

The Rat Cms Alpha 2 (download.php) Remote Vulnerability

Exploit for unknown platform in category web applications ======================================================= The Rat Cms Alpha 2 download.php Remote Vulnerability ======================================================= ---------------------------- The Rat Cms Alpha 2 Priviledge Escalation...

The Rat CMS Alpha 2 - download.php Priviledge Escalation

The Rat CMS Alpha 2 - download.php Priviledge Escalation ---------------------------- The Rat Cms Alpha 2 Priviledge Escalation ---------------------------- Autore: x0r Email: [email protected] Download:...

CVE-2008-4634

Cross-site scripting XSS vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079...

Calendars for the Web 4.02 Admin Auth Bypass Vulnerability

No description provided by source. Exploit discovered by SecVuln from http://secvuln.com Come join our clan! contact [email protected] Author == SecVuln Version == 4.02 Software == Calendars for the web by great hill corporation Calendars for the web has a vulnerability in the administration...

Availscript Article Script (articles.php) Multiple Vulnerabilities

No description provided by source. /\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript Article Script articles.php...

availscript-sqlxss.txt

/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript Article Script articles.php Multiple Vulnerabilities Vendor:...

AvailScript Article Script - articles.php Multiple Vulnerabilities

AvailScript Article Script - articles.php Multiple Vulnerabilities /\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript...

AvailScript Article Script - 'articles.php' Multiple Vulnerabilities

/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript Article Script articles.php Multiple Vulnerabilities Vendor:...

PT-2008-5267 · Opendb · Opendb

Name of the Vulnerable Software and Affected Versions: OpenDb version 1.0.6 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the user id parameter in an edit action to "user admin.php", the title parameter to "listings.php", and the...

MicroWorld MailScan multiple security vulnerabilities

Durectory traversal, authenticatio bypass, crossite scripting, informaiton leak via Web admin page TCP/10443...

Cross site scripting

Cross-site scripting XSS vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote attackers to inject arbitrary web script or HTML via error messages in the "/admin.aspx - System Log" page...

CVE-2008-3483

Cross-site scripting XSS vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote attackers to inject arbitrary web script or HTML via error messages in the "/admin.aspx - System Log" page...

Lightweight news portal (LNP) 1.0b - Multiple Vulnerabilities

Lightweight news portal LNP 1.0b - Multiple Vulnerabilities / | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , |...

nextgen-xss.txt

============================== XSS - Nextgen gallery 0.96 wordpress plugin ============================== Author: Eduardo Neves a.k.a eth0 Date: 07 june 2008 Site: webappsecurity.wordpress.com ————————————— APPLICATION : Nextgen gallery VERSION : alert'xss'; And when the gallery was posted, user...

CVE-2008-2496

Multiple cross-site scripting XSS vulnerabilities in Quate CMS 0.3.4 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 login.php, and 3 credits.php in admin/, and 4 upgrade/index.php...

AlkalinePHP <= 0.77.35 (adduser.php) Arbitrary Add-Admin Vuln

No description provided by source. --==+================================================================================+==-- --==+ AlkalinePHP = 0.77.35 adduser.php Arbitrary Add-Admin +==-- --==+================================================================================+==-- Discovered By:...

CVE-2008-2211

Multiple cross-site scripting XSS vulnerabilities in admin/inc/footer.php in Maian Guestbook 3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 msgscript2 and 2 msgscript3 parameters...

CVE-2008-2210

Multiple cross-site scripting XSS vulnerabilities in Maian Support 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 msgscript, 2 msgscript2, and 3 msgscript3 parameters to admin/inc/footer.php; and the 4 msgscript2 parameter to admin/inc/header.php...