2751 matches found
Simple Customer 1.3 Arbitrary Change Admin Password Exploit
Exploit for unknown platform in category web applications =========================================================== Simple Customer 1.3 Arbitrary Change Admin Password Exploit =========================================================== ---- Remote Change admin Password----...
CVE-2009-1556
img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the nextfile parameter, as demonstrated by reading .htpasswd to obtain the admin password, a different vulnerabili...
ABC Advertise 1.0 Admin Password Disclosure Vulnerability
No description provided by source. homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username...
ABC Advertise 1.0 Password Disclosure
homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username and password. Example : login=admin...
ABC Advertise 1.0 - Admin Password Disclosure
ABC Advertise 1.0 - Admin Password Disclosure homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admi...
ABC Advertise 1.0 - Admin Password Disclosure
homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username and password. Example : login=admin...
CVE-2008-6752
CVE-2008-6752 affects the Twitter Clone (TClone) plugin for ReVou Micro Blogging. The bug occurs in adminlogin/password.php where the original password is not verified before changing passwords, enabling a remote attacker to change the administrator’s password and gain privileges by sending a Cha...
CRE Loaded 6.2 - 'products_id' SQL Injection
+-------------------------------------+ + Homepage: http://www.creloaded.com/ + Product: CRE Loaded v6.2 + File: productinfo.php + Parameter: productid +-------------------------------------+ + SQL Injection: +...
w3bcms Gaestebuch 3.0.0 - Blind SQL Injection
w3bcms Gaestebuch 3.0.0 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security...
CVE-2008-6673
asp/bslogin.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to 1 change the admin password via the cSaveAdminPW action; 2 modify site information, such as the contact address, via the saveAdmin; and 3 modify the site design...
Design/Logic Flaw
asp/bslogin.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to 1 change the admin password via the cSaveAdminPW action; 2 modify site information, such as the contact address, via the saveAdmin; and 3 modify the site design...
Zabbix 1.6.2 Cross Site Request Forgery
nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-006 - Zabbix Multiple Frontend CSRF Application: Zabbix 1.6.2 Vendor: Zabbix Vendor website: http://www.zabbix.com Author: Adam Baldwin [email protected] I. BACKGROUND "ZABBIX is an enterprise-class open source...
CVE-2008-6535
admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter...
CVE-2008-6535
The CVE-2008-6535 entry concerns PayPal eStores: admin/settings.php allows remote attackers to bypass access restrictions and change the administrator password via a direct request with a modified NewAdmin parameter. The NVD entry lists a base score of 7.5 (HIGH) with NETWORK attack vector and LO...
Easy Chat Server Change Admin Password
EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Booom!! Username: Password: Confirm Password: Email: chi le3ba /BO...
EFS Easy Chat Server 2.2 - Cross-Site Request Forgery (Change Admin Password)
EFS Easy Chat Server 2.2 - Cross-Site Request Forgery Change Admin Password EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Booom!! Username: Password: Confirm Password: Email: chi le3ba...
Document Library 1.0.1 - Arbitrary Change Admin
Document Library 1.0.1 - Arbitrary Change Admin @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=Contry : Turkish @=======================================@ @=Script...
Document Library 1.0.1 - Arbitrary Change Admin
@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=Contry : Turkish @=======================================@ @=Script :Document Library Version 1.0.1 @=S.Site...
The use of the registry read-hash-vulnerability warning-the black bar safety net
SA permissions of the injection point,we can use the system comes with some command to read the registry key information. sa is the default SYSTEM permissions that can be read in the sam key. regedit-e c:\1.reg HKEYLOCALMACHINE\SAM\SAM\Domains\Account\Users\000001F4 win2K reg export...