2796 matches found
AirStation series and BroadStation series vulnerable to cross-site request forgery
Overview Buffalo's AirStation Series and BroadStation Series routers are vulnerable to cross-site request forgery. Buffalo's AirStation series and BroadStation series routers have a web administration interface that can be accessed from a web browser to configure their functional settings. The we...
WirelessIP5000 has multiple vulnerabilities
Overview WirelessIP5000, a wireless IP phone from Hitachi Cable, contains multiple vulnerabilities; - Illegal access using the port TCP3390 - SNMP access using an arbitrary community name - Access to the HTTP server by an unauthorized user in the factory default configuration - The HTTP server...
WirelessIP5000 has multiple vulnerabilities
Overview WirelessIP5000, a wireless IP phone from Hitachi Cable, contains multiple vulnerabilities; - Illegal access using the port TCP3390 - SNMP access using an arbitrary community name - Access to the HTTP server by an unauthorized user in the factory default configuration - The HTTP server...
mypicgallery-admin.txt
!/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit --+-\n"; print "-+-- Discovered && Coded By: t0pP8uZz --+-\n"; print "-+-- Discovered On: 16 MAY 2008 / h4ck-y0u, milw0rm --+-\n"; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit...
phpagtc-admin.txt
!/usr/bin/perl Note: adduser.php is accessable to a guest/any-user, but if you access through a browser you cant add admin, theres a hidden POST buried in the script, which contains the userlevel. Note: alot of sites run this script and they remove the "powered by" dork. Also you can get access t...
Advanced Image Hosting (AIH) 2.1 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= Advanced Image Hosting AIH 2.1 Remote SQL Injection Exploit ============================================================= !/usr/bin/perl -w Advanced Image Host Script Powered by...
Links Directory 1.1 (cat_id) Remote SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ Links Directory 1.1 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By:...
Software Zone Remote SQL Injection Vulnlerabilities
No description provided by source. --==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...
Gaming Directory 1.0 - 'cat_id' SQL Injection
--==+================================================================================+==-- --==+ Gaming Directory 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 5 April 2008...
Links Directory 1.1 (cat_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== Links Directory 1.1 catid Remote SQL Injection Vulnerability ===============================================================...
Links Directory 1.1 - cat_id SQL Injection
Links Directory 1.1 - catid SQL Injection --==+================================================================================+==-- --==+ Links Directory 1.1 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By...
Links Directory 1.1 - 'cat_id' SQL Injection
--==+================================================================================+==-- --==+ Links Directory 1.1 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 6 April...
Affiliate Directory - cat_id SQL Injection
Affiliate Directory - catid SQL Injection --==+================================================================================+==-- --==+ Affiliate Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8u...
Vastal I-Tech Software Zone (cat_id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Vastal I-Tech Software Zone catid SQL Injection Vulnerability ================================================================...
Vastal I-Tech Software Zone - cat_id SQL Injection
Vastal I-Tech Software Zone - catid SQL Injection --==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR:...
FaScript FaPhoto 1.0 - 'show.php' SQL Injection
AUTHOR : IRCRASH Dr.Crash Script Download : http://en.fascript.com/en.faphoto.zip Injection Adress : http://Sitename/faname/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with loadfile Function in mysql and see admin Username and...
eggBlog 4.0 Password Retrieve Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== eggBlog 4.0 Password Retrieve Remote SQL Injection Exploit ========================================================== Author: GiReX Date: 27/03/2008 - 1/04/2008 Added exploit for...
CVE-2008-1529
ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods...
