JBrowser _admin/ Direct Request Admin Authentication Bypass

The remote host is running JBrowser - a PHP script designed to browse photos and files in a remote directory. It is possible to access the admin panel by directly requesting '/admin/'. A remote attacker could exploit this to perform administrative actions without authentication. %NASLMINLEVEL 703...

Получение доступа к панели администрирования в Willwin's Web Voting v.1.0

Получение доступа к панели администрирования в Willwin's Web Voting v.1.0 Название скрипта: Willwin's Web Voting Уязвимая версия: v.1.0 Сайт производителя: http://willwin.plex.ru Автор: [email protected] Дата: 13th December 2003 Пароль для получения доступа к панели управления голосованием в...

UPB: Discussion Board/Web-Site Takeover

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: UPB: Discussion Board/Web-Site Takeover product: Ultimate PHP Board v1.9 latest vendor: www.myupb.com risk: high date: 05/24/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/024.en.txt...

InterForum v.1.0.0 BETA 1 many holes

InterForum v.1.0.0 BETA 1 many holes Founder : MaskNBTA -- [email protected] Date : 6/18/2003 Version : 1.0 Beta 1 maybe all below version Problems : + XSS bug + Read private message ' s another account + Change profile ' s another account ---- access admin panel 1/ XSS bug : In...

UPB: Discussion Board/Web-Site Takeover

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: UPB: Discussion Board/Web-Site Takeover product: Ultimate PHP Board v1.9 latest vendor: www.myupb.com risk: high date: 05/24/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/024.en.txt...

MyGuestBK - Unauthorized Admin Panel Access

source: https://www.securityfocus.com/bid/7213/info MyGuestBk has been reported vulnerable to unauthorized Admin Panel Access. It has been reported that an attacker may access arbitrary MyGuestBK administrative functions through the MyGuestBK administration panel without prior authorization...

MyGuestBK - Unauthorized Admin Panel Access

MyGuestBK - Unauthorized Admin Panel Access source: https://www.securityfocus.com/bid/7213/info MyGuestBk has been reported vulnerable to unauthorized Admin Panel Access. It has been reported that an attacker may access arbitrary MyGuestBK administrative functions through the MyGuestBK...

Easily and Remotely Pipe a Covert Shell on phpBB version 1.4.0 and below

note to editors: please leave all links intact. Easily and Remotely Pipe a Covert Shell on phpBB version 1.4.0 and below found and written by: [email protected] http://www.modernhacker.com phpBB, is an open source bulletin board created by the phpBB group phpbb.com . Versions 1.4.0 and belo...

allmanage.pl-admin.txt

Allmanage.pl Admin Password vulnerability 15 may 2000 Another allmanage.pl vulnerability see also allmanage.pl.txt Everybody can easily get the admin password from the allmanage directory. You are able to set/change lots of variables, add accounts, mail users, backup, restore, edit header/footer...