CVE-2008-6157

SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, enabling context-dependent attackers to obtain sensitive information. The issue is documented across several sources (NVD, CVE records, PT-2009-1632) with no concrete vendor/version details provided and no expl...

metabbs 0.11 Change admin password vulnerability

Metabbs 0.11 2008-08-06 19:56 form method="post" action="http://test.com/metabbs/admin/settings/?" dl dtlabel for="settingsadminpassword"Admin password/label/dt ddinput id="settingsadminpassword" size="20" name="settingsadminpassword" value="" type="password" //dd dtlabel...

MetaBBS 0.11 Password Changing Exploit

Metabbs 0.11 2008-08-06 19:56 Admin password Header file Footer File Site theme Language Always Use Default Language TimeZone...

TxtBlog 1.0 Alpha Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = TxtBlog v 1.0 Alpha Downl =...

eVision CMS <= 2.0 (field) SQL Injection Vulnerability

No description provided by source. --+++============================================================+++-- --+++====== eVision CMS = 2.0 SQL Injection Vulnerability ======+++-- --+++============================================================+++-- + Author : darkjoker + Site :...

Web Server 'admin' Default Password (deprecated)

Binary data 4822.prm...

EPOLL SYSTEM 3.1 (password.dat) Disclosure Exploit

No description provided by source. !/usr/bin/python Portal Name: EPOLL SYSTEM Version : All version 'Google Dork : Powered by Egorix Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] Epoll system login page = www.site.com/Path/admin.php import...

Gallery Kys 1.0 Password Disclosure / XSS

START 0x01 Informations: Script : Gallery Kys 1.0 Download : http://www.advancescripts.com/djump.php?ID=6285 Vulnerability : Admin Password Disclosure / Permanent XSS Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org 0x02 Bug: Admin Password Disclosure Bugged file is:...

Sad Raven's Click Counter 1.0 - 'passwd.dat' File Disclosure

!/usr/bin/python Portal Name: Sad Raven's Click Counter version : 1.0 'Google Dork : Sad Raven's Click Counter v1.0 Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] import urllib import sys import parser serv="http://" i=0 for arg in sys.argv:...

Gallery Kys 1.0 - Admin Password Disclosure Persistent Cross-Site Scripting

Gallery Kys 1.0 - Admin Password Disclosure Persistent Cross-Site Scripting START 0x01 Informations: Script : Gallery Kys 1.0 Download : http://www.advancescripts.com/djump.php?ID=6285 Vulnerability : Admin Password Disclosure / Permanent XSS Author : Osirys Contact : osirysatlivedotit Website :...

Gallery Kys 1.0 Admin Password Disclosure / Permanent XSS Vulns

Exploit for unknown platform in category web applications =============================================================== Gallery Kys 1.0 Admin Password Disclosure / Permanent XSS Vulns =============================================================== START 0x01 Informations: Script : Gallery Kys 1...

Gallery Kys 1.0 Admin Password Disclosure / Permanent XSS Vulns

No description provided by source. START 0x01 Informations: Script : Gallery Kys 1.0 Download : http://www.advancescripts.com/djump.php?ID=6285 Vulnerability : Admin Password Disclosure / Permanent XSS Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org 0x02 Bug: Admin Passwor...

Gallery Kys 1.0 - Admin Password Disclosure / Persistent Cross-Site Scripting

START 0x01 Informations: Script : Gallery Kys 1.0 Download : http://www.advancescripts.com/djump.php?ID=6285 Vulnerability : Admin Password Disclosure / Permanent XSS Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org 0x02 Bug: Admin Password Disclosure Bugged file is:...

phosheezy 2.0 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl phosheezy 2.0 http://www.ryneezy.net/apps/phosheezy/phosheezy-v0.2.tar.gz Remote Command Execution Exploit by Osirys osirysatlivedotit osirys.org Greets: HaVoC, x0r, jay, BlackLight lol at athos...

phosheezy 2.0 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================== phosheezy 2.0 Remote Command Execution Exploit ============================================== !/usr/bin/perl phosheezy 2.0 http://www.ryneezy.net/apps/phosheezy/phosheezy-v0.2.tar.gz Remote...

CVE-2008-5896

CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CARateMySite.mdb. NOTE: some of these details are obtained...

EggBlog 3.1.10 XSRF Vulnerability

| | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^...

EggBlog 3.1.10 - Cross-Site Request Forgery (Change Admin Password)

EggBlog 3.1.10 - Cross-Site Request Forgery Change Admin Password | | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^ milw0rm.com 2009-01-01...

EggBlog 3.1.10 Change Admin Pass CSRF Vulnerability

Exploit for unknown platform in category web applications =================================================== EggBlog 3.1.10 Change Admin Pass CSRF Vulnerability =================================================== | | | Project: EggBlog v 3.1.10 | | Author: x0r | || Code: x0r :P...

w3blabor CMS 3.3.0 - Authentication Bypass

'/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2oo8 | -------------------------------------------------- | w3blabor CMS = v3.3.0 Admin Login Bypass | | requires...