Free Arcade Script 1.0 - Authentication Bypass Arbitrary File Upload

Free Arcade Script 1.0 - Authentication Bypass Arbitrary File Upload .--------------------------------------------------------------------------. | Web Application : Free Arcade Script 1.0 | | Homepage : http://www.freearcadescript.net |...

zFeeder admin.php Direct Request Admin Authentication Bypass

The remote host is running zFeeder, an open source PHP application used to aggregate RSS content. The remote installation of zFeeder is configured by default using empty values for the admin's username and password. A remote attacker can leverage this issue to gain administrative control of the...

CVE-2009-0541

Multiple cross-site scripting XSS vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the username field in an admin/ request to index.php, possibly related to the loginusername parameter and the app/code/core/Mage/Admin/Model/Session.p...

CVE-2008-6270

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the user parameter...

Magento 1.2 - appcodecoreMageAdminhtmlcontrollersIndexController.php?email Cross-Site Scripting

Magento 1.2 - appcodecoreMageAdminhtmlcontrollersIndexController.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/33872/info Magento is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied...

Sql injection

SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL commands via the loginemail parameter aka login field. NOTE: some of these details are obtained from third party information...

CVE-2009-0707

SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL commands via the loginemail parameter aka login field. NOTE: some of these details are obtained from third party information...

zFeeder 1.6 Authentication Bypass

-----------------:remote bypass admin panel:----------------- ------------------------------------------------------- script:zfeeder 1.6 ------------------------------------------------------------------ download...

zFeeder 1.6 - admin.php Admin Bypass

zFeeder 1.6 - admin.php Admin Bypass -----------------:remote bypass admin panel:----------------- ------------------------------------------------------- script:zfeeder 1.6 ------------------------------------------------------------------ download...

zFeeder 1.6 (admin.php) No Authentication Vulnerability

Exploit for unknown platform in category web applications ======================================================= zFeeder 1.6 admin.php No Authentication Vulnerability ======================================================= -----------------:remote bypass admin panel:-----------------...

zFeeder 1.6 (admin.php) No Authentication Vulnerability

No description provided by source. -----------------:remote bypass admin panel:----------------- ------------------------------------------------------- script:zfeeder 1.6 ------------------------------------------------------------------ download...

CVE-2009-0597

SQL injection vulnerability in admin/index.php in w3bcms aka w3blabor CMS before 3.4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the benutzername parameter aka Username field in a login action...

CVE-2008-6119

Static code injection vulnerability in gooplecms/admin/account/action/editpass.php in Goople CMS 1.7 allows remote attackers to inject arbitrary PHP code into admin/userandpass.php via the 1 username and 2 password parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-6119

Static code injection vulnerability in gooplecms/admin/account/action/editpass.php in Goople CMS 1.7 allows remote attackers to inject arbitrary PHP code into admin/userandpass.php via the 1 username and 2 password parameters. NOTE: the provenance of this information is unknown; the details are...

gr blog 1.1.4 - Arbitrary File Upload Authentication Bypass

gr blog 1.1.4 - Arbitrary File Upload Authentication Bypass GR Blog v1.1.4 Upload/Bypass Multiple Remote Vulnerabilities Author: Jose Luis Gongora Fernandez a.k.a JosS Web: http://hack0wn.com/ // TEST ON VERSION GR Blog v1.1.4, in my localhost Download :...

Ping IP - Authentication Bypass

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Ping IP Auth Bypass SQL Script : Ping IP Price : $59 : Demo : http://warhound.com/ASP/ping/admin.aspx Details : http://warhound.com/asp/products.htm Admin : PATH /ping/admin.aspx username : ' or '1 password : '...

DMXReady Job Listing 1.1 Contents Change

Title : DMXReady Job Listing http://target/path//applications/JobListingManager/incjoblistingmanager.asp Edit - http://target/path//admin/JobListingManager/CategoryManager/list.asp :...

AktifKobi Kurumsal Web Sql Injection Vulnerability (Tr)

Author: BiLGi ASD Contact: [email protected] Home: Cryptosuite.Org Script: AktifKobi Kurumsal Web Tr Sql injection Vulnerability http://www.aspindir.com/goster/5729 Dork: Unavailable Admin Panel: /yonetim Exploit: UrunlerDetay.asp?ID=40+union+select+0,SIFRE,ID+from+ayarlar Demo:...

PollPro 3.0 XSRF VuLn.

------------------- header data start ------------------- Application Name : PollPro Vulnerable Type : XSRF Infection : Uzaktan otomatik olarak admin pass change edilebilir. Bug Fix Advice : Forma Oturum Keyi Session Token eklenmeli, eski ifre sorulmaldr. author : The0nur-n0x -------------------...

FlexPHPDirectory 0.0.1 SQL Injection

Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms: Flexphpdiren Version: 0.0.1 Download: http://www.china-on-site.com/flexphpdir/ Bug In \admin\usercheck.php 'n' \add.php $sql = "select username,adminid from linkexadmin where username='$checkuser' and...