Password Protector SD 1.3.1 Insecure Cookie

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script : Password Protector SD v1.3.1 Insecure Cookie Handling Vulnerability + Found by : Mr.tro0oqy + C0ntact :...

Dacio's Image Gallery 1.6 - Directory Traversal / Authentication Bypass / Arbitrary File Upload

=-=-Local Directory Traversal/bypass/shell upload/-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::DacioimgGal-v1.6 ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download...

Luxbum 0.5.5/stable - Authentication Bypass

/\ \ \ \ /'\ \ \ , auth bypass URL: http://www.luxbum.net/ Found by: knxone Greetings: Pirata from this famous irc server ; +=========+ | CONCEPT | +=========+ Luxbum allows authentification using dotclear username and password via MySQL, while the default auth mechanism uses a md5 hash of the...

LinkBase 2.0 - Remote Cookie Grabber

LinkBase 2.0 - Remote Cookie Grabber + Download LinkBase 2.0 Cookie Grabber Exploit + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Greetz : All my friends + Make 2 files and upload to your host : stealer.php - Put the following code into the file : log.txt - CHMOD it 777 and put...

LinkBase 2.0 Remote Cookie Grabber Vulnerability

No description provided by source. + Download LinkBase 2.0 Cookie Grabber Exploit + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Greetz : All my friends + Make 2 files and upload to your host : stealer.php - Put the following code into the file : ?php $cookie = $GET'cookie'; $lo...

French hacker gains access to Twitter's admin panel

From ZDNet Dancho Danchev Yesterday, a French hacker claimed to have gained access to Twitter’s administration panel, and based on the screen shots that he included featuring internal data zataz.com for accounts belonging to U.S President Barack Obama, Britney Spears, Ashton Kutcher, and Lily...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the slab parameter in an edit action, 2 the catname parameter in a showcats action, and 3 the cat parameter in a reordercat action...

CVE-2009-1458

CVE-2009-1458 affects razorCMS prior to 0.4. The admin/index.php file contains multiple XSS flaws that allow remote attackers to inject arbitrary web script or HTML via (1) slab in the edit action, (2) catname in showcats, and (3) cat in reordercat. Impact is web-script/HTML injection without use...

CVE-2009-1366

Cross-site scripting XSS vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke DNN before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "name/value pairs" and "paypal IPN functionality."...

WysGui CMS 1.2b (Insecure Cookie Handling) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Phorum < 5.2.10 Cross-Site Scripting/Request Forgery

=cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL:...

Limbo CMS 1.0.4.2 - Cross-Site Request Forgery Privilege Escalation

Limbo CMS 1.0.4.2 - Cross-Site Request Forgery Privilege Escalation Limbo cms v 1042Lt Cross-site request forgery Privilege Escalation Proof of Concept by Alfons Luja download : http://www.limboportal.com/index.php/option/downloads/task/download/id/67 d00rk: intext:"site powered by limbo"...

Phorum Cross Site Scripting / Request Forgery

=cicatriz ==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL: http://research.voodoo-labs.org/advisories/...

Authentication flaw

admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecmsusername cookie...

CVE-2008-6714

admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecmsusername cookie...

CVE-2008-6714

admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecmsusername cookie...

Gravity Board X 2.0b SQL Injection / Post Auth Code Execution

No description provided by source. ================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Sql injection

SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL commands via the hash parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Gravity Board X 2.0 Beta - SQL Injection (Authenticated) Code Execution

Gravity Board X 2.0 Beta - SQL Injection Authenticated Code Execution ================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution

================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...