DEBIAN-CVE-2007-0313

Unspecified vulnerability in GONICUS System Administration GOsa before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests...

Design/Logic Flaw

Unspecified vulnerability in GONICUS System Administration GOsa before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests...

CVE-2007-0313

Unspecified vulnerability in GONICUS System Administration GOsa before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests...

MGB Email.PHP SQL注入漏洞

MGB是一款基于PHP的WEB应用程序。 MGB不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Email.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 MGB 0.5.4 5 http://sourceforge.net/project/showfiles.php?groupid=154902&releaseid=478432 !/usr/bin/perl MGB = 0.5.4.5 Exploit Vulnerability found by SlimTim10 Created By:...

sNews <= 1.5.30 Remote Reset Admin Pass / Command Exec Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- sNews = 1.5.30 unauthorized access / reset admin pass / cmd exec exploit by rgod dork: "Barbecued by sNews" mail: retrog at alice dot it site: http://retrogod.altervista.org...

sNews 1.5.30 - Remote Reset Admin Pass / Command Execution

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$s...

sNews 1.5.30 - Remote Reset Admin Pass Command Execution

sNews 1.5.30 - Remote Reset Admin Pass Command Execution 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".deche...

Vz (Adp) Forum 2.0.3 - Remote Password Disclosure

Vz Adp Forum 2.0.3 - Remote Password Disclosure SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC:...

CVE-2006-6818

AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config...

CVE-2006-6818

AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config...

Enthrallweb emates 1.0 - 'newsdetail.asp' SQL Injection

!/usr/bin/perl Script Name: Enthrallweb emates 1.0 newsdetail.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 119.40 USD .. : ajann,Turkey use IO::Socket; if@ARGV newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die...

CVE-2006-6377

CVE-2006-6377 contributes a remote-access issue in Uploadscript 1.2 and earlier. The description states that sensitive data is stored under the web root with insufficient access control, enabling remote attackers to obtain the admin password hash by directly requesting /password.txt. The NVD note...

phpGraphy 0.9.12 - Privilege Escalation / Commands Execution

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n";...

Cahier de texte V2.0 SQL Code Execution Exploit

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/ Poc.link........

Article Script <= 1.6.3 (rss.php) Remote SQL Injection Vulnerability

No description provided by source. Article Script v1.and v1.6.3 Sql injection Script Name :Article Script Home Page:www.articlescript.org Bug Founder :Liz0ziM Mail:[email protected] Baba Kimdir? Tabiki Liz0ziM ------------------------------------------------------------...

Yener Haber Script v2.0 SQL injection

BiyoSecurity.Org script name : Yener Haber Script v2.0 Demo : http://www50.brinkster.com/yenerturk Risk : High Regards : DjReMix Thanks : Korsan , Liz0zim , TRIP Exploit : http://victim.com/?x=2&kategori=11&id=-120union+select+id,kullaniciadi,sifre,4,5,6,7,8,9+from+admin Admin Pass Displayed :=...

Netopia Router Crafted SNMP Request Remote Admin Password Disclosure

The remote host appears to be running a Netopia router with SNMP enabled. Further, the Netopia router is using the default SNMP community strings. This version of the Netopia firmware is vulnerable to a flaw wherein a remote attacker can, by sending a specially formed SNMP query, retrieve the...

CMtextS <= 1.0 (users_logins/admin.txt) Credentials Disclosure Vuln

Exploit for unknown platform in category web applications =================================================================== CMtextS = 1.0 userslogins/admin.txt Credentials Disclosure Vuln =================================================================== ::::::::: :::::::::: ::: ::: ::::::::::...

CMtextS 1.0 - users_loginsadmin.txt Credentials Disclosure

CMtextS 1.0 - usersloginsadmin.txt Credentials Disclosure ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +...

CMtextS &lt;= 1.0 (users_logins/admin.txt) Credentials Disclosure Vuln

No description provided by source. ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++...