aspWebLinks 2.0 - SQL Injection / Admin Pass Change

AspWebLink 2.0 Remote Admin Pass Change Exploit Administrative Password:Number of Days New:Number of Visits Hot:Links Per Page:td wid...

CVE-2006-2546

A recommended admin password reset mechanism for BEA WebLogic Server 8.1, when followed before October 10, 2005, causes the administrator password to be stored in cleartext in the domain directory, which could allow attackers to gain privileges...

Zix Forum <= 1.12 (layid) SQL Injection Vulnerability

Zix Forum = 1.12 layid SQL Injection Vulnerability Vulnerability: -------------------- SQLInjection: Input passed to the "layid" parameter in 'settings.asp' not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code...

Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit

No description provided by source. !/usr/bin/perl -w Remotely change the administrator password or password hash of Symantec Scan Engine. Author: Marc Bevand of Rapid7 marcbevandatrapid7.com Copyright 2006 Rapid7, LLC. All rights reserved. Redistribution and use in source and binary forms, with o...

[Full-disclosure] Sql Injection in BookMark4u

site: http://bookmark4u.sourceforge.net/ Hello i found a vulnerability in bookmark4u that u can use to make sql injections... the following PoC changes the admin password: code form action='http://bookmark4u.sourceforge.net/v2.0.0/admin/config.php' method='post' trtd align='center' input...

Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit

Exploit for cgi platform in category remote exploits ================================================================= Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit ================================================================= !/usr/bin/perl -w Remotely change the...

1 1 4 Forum 2 0 0 5 The official version of the vulnerability-vulnerability warning-the black bar safety net

Keywords: "ALL RIGHTS RESERVED design and production: Web 1 1 4" Vulnerability description: Site 1 1 4 Forum 2 0 0 5 version of the official /edituserdb. asp To submit data and cooikes lack of validation Cause any user can modify the administrator password The default background admin/index. asp...

phpBB 2.0.19 - 'user_sig_bbcode_uid' Remote Code Execution

!/usr/bin/perl r57phpbba2e2.pl - phpBB admin 2 exec exploit version 2 based on usersigbbcodeuid bug tested on 2.0.12 , 2.0.13 , 2.0.19 -------------------------------------------- screen r57phpbba2e2.pl -u http://192.168.0.2/phpBB-2.0.19/ -L admin -P password Command for execute or 'exit' for exi...

Crafty Syntax Image Gallery 3.1g - Remote Code Execution

!/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This program is distributed in the hope that...

Crafty Syntax Image Gallery <= 3.1g Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This...

Sql injection

SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter...

CVE-2006-1541

SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter...

CVE-2006-1541

SQL injection in EzASPSite 2.0 RC3 and earlier (Default.asp) allows remote attackers to run arbitrary SQL and obtain the admin password SHA1 hash via the Scheme parameter. Connected documents do not add further technical details or mitigations in this set; no exploit status provided.

CVE-2006-1541

SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter...

Improper access control

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd...

CVE-2006-1412

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd...

PHPCollab 2.x NetOffice 2.x - sendpassword.php SQL Injection

PHPCollab 2.x NetOffice 2.x - sendpassword.php SQL Injection !/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n\r\n"; echo "a googledork: intitle:phpcollab|netoffice "index of" -www-apps -php-collab.org -ext:xml\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path email...

SPIP < 1.8.2-g SQL Injection and XSS Flaws

The remote web server has a PHP application that is affected by multiple flaws. Description: The remote host is running SPIP, an open-source CMS written in PHP. The remote version of this software is prone to SQL injection and cross site scripting attacks. An attacker could send specially crafted...

TFT Gallery 0.10 - Password Disclosure

!/usr/bin/perl Copyright C undefined1 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This program is...

Advisory-20.txt

/ -------------------------------------------------------- Neo Security Team NST� - Advisory 20 - 04/03/06 -------------------------------------------------------- Program: Pixel Post Homepage: http://photoblogger.halof.de/ Vulnerable Versions: 3.0 and lower versions. Risk: High! Impact: Critical...