ABC Advertise 1.0 - Admin Password Disclosure

homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username and password. Example : login=admin...

ABC Advertise 1.0 - Admin Password Disclosure

ABC Advertise 1.0 - Admin Password Disclosure homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admi...

CVE-2008-6752

CVE-2008-6752 affects the Twitter Clone (TClone) plugin for ReVou Micro Blogging. The bug occurs in adminlogin/password.php where the original password is not verified before changing passwords, enabling a remote attacker to change the administrator’s password and gain privileges by sending a Cha...

CRE Loaded 6.2 - 'products_id' SQL Injection

+-------------------------------------+ + Homepage: http://www.creloaded.com/ + Product: CRE Loaded v6.2 + File: productinfo.php + Parameter: productid +-------------------------------------+ + SQL Injection: +...

w3bcms Gaestebuch 3.0.0 - Blind SQL Injection

w3bcms Gaestebuch 3.0.0 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security...

Design/Logic Flaw

asp/bslogin.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to 1 change the admin password via the cSaveAdminPW action; 2 modify site information, such as the contact address, via the saveAdmin; and 3 modify the site design...

CVE-2008-6673

asp/bslogin.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to 1 change the admin password via the cSaveAdminPW action; 2 modify site information, such as the contact address, via the saveAdmin; and 3 modify the site design...

Zabbix 1.6.2 Cross Site Request Forgery

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-006 - Zabbix Multiple Frontend CSRF Application: Zabbix 1.6.2 Vendor: Zabbix Vendor website: http://www.zabbix.com Author: Adam Baldwin [email protected] I. BACKGROUND "ZABBIX is an enterprise-class open source...

CVE-2008-6535

admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter...

CVE-2008-6535

The CVE-2008-6535 entry concerns PayPal eStores: admin/settings.php allows remote attackers to bypass access restrictions and change the administrator password via a direct request with a modified NewAdmin parameter. The NVD entry lists a base score of 7.5 (HIGH) with NETWORK attack vector and LO...

Easy Chat Server Change Admin Password

EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Booom!! Username: Password: Confirm Password: Email: chi le3ba /BO...

EFS Easy Chat Server 2.2 - Cross-Site Request Forgery (Change Admin Password)

EFS Easy Chat Server 2.2 - Cross-Site Request Forgery Change Admin Password EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Booom!! Username: Password: Confirm Password: Email: chi le3ba...

Document Library 1.0.1 - Arbitrary Change Admin

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=Contry : Turkish @=======================================@ @=Script :Document Library Version 1.0.1 @=S.Site...

Document Library 1.0.1 - Arbitrary Change Admin

Document Library 1.0.1 - Arbitrary Change Admin @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=Contry : Turkish @=======================================@ @=Script...

The use of the registry read-hash-vulnerability warning-the black bar safety net

SA permissions of the injection point,we can use the system comes with some command to read the registry key information. sa is the default SYSTEM permissions that can be read in the sam key. regedit-e c:\1.reg HKEYLOCALMACHINE\SAM\SAM\Domains\Account\Users\000001F4 win2K reg export...

CVE-2008-6157

SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-6157

SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, enabling context-dependent attackers to obtain sensitive information. The issue is documented across several sources (NVD, CVE records, PT-2009-1632) with no concrete vendor/version details provided and no expl...

metabbs 0.11 Change admin password vulnerability

Metabbs 0.11 2008-08-06 19:56 form method="post" action="http://test.com/metabbs/admin/settings/?" dl dtlabel for="settingsadminpassword"Admin password/label/dt ddinput id="settingsadminpassword" size="20" name="settingsadminpassword" value="" type="password" //dd dtlabel...

MetaBBS 0.11 Password Changing Exploit

Metabbs 0.11 2008-08-06 19:56 Admin password Header file Footer File Site theme Language Always Use Default Language TimeZone...

TxtBlog 1.0 Alpha Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = TxtBlog v 1.0 Alpha Downl =...