2796 matches found
PORAR WEBBOARD (question.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ PORAR WEBBOARD question.asp Remote SQL Injection Vulnerability ================================================================ CoRPITX Turkey www.Hayalet-hack.com...
PunBB 1.2.16 - Blind Password Recovery
PunBB 1.2.16 - Blind Password Recovery ^0-94-0-92-0-92/td/', $s, $m; if count$m define'DATE', mktime0, 0, 0, $m2, $m3, $m1; else define'DATE', time - 86400; //just in case, the forum or account just has been created printf"Admin : %s\nDate : %s\n--\n", ADMIN, DATE; $h = curlinit; curlsetopt$h,...
PunBB <= 1.2.16 Blind Password Recovery Exploit
Exploit for unknown platform in category web applications =============================================== PunBB ^0-94-0-92-0-92/td/', $s, $m; if count$m define'DATE', mktime0, 0, 0, $m2, $m3, $m1; else define'DATE', time - 86400; //just in case, the forum or account just has been created...
WordPress Plugin Adserve 0.2 - 'adclick.php' SQL Injection
getvar"SELECT url FROM $tablename WHERE id=$id;"; Exploit id variable isnt filtered so we can inject and check the output in the Location response-header If exploit is succesfull Wordpress administrators login and md5 hashed password is retrieved echo "\n"; echo "-------WordPress Adserve plugin v...
phpCMS 1.2.2 - 'file' Remote File Disclosure
Digital Security Research Group DSecRG Advisory DSECRG-08-005 Application: phpCMS Versions Affected: 1.2.2 Vendor URL: http://www.phpcms.de Bug: Remote File Disclosure, Get admin password Exploits: YES Reported: 10.01.2008 Vendor response: 12.01.2008 Date of Public Advisory: 29.01.2008 Authors:...
phpCMS 1.2.2 - file Remote File Disclosure
phpCMS 1.2.2 - file Remote File Disclosure Digital Security Research Group DSecRG Advisory DSECRG-08-005 Application: phpCMS Versions Affected: 1.2.2 Vendor URL: http://www.phpcms.de Bug: Remote File Disclosure, Get admin password Exploits: YES Reported: 10.01.2008 Vendor response: 12.01.2008 Dat...
phpCMS 1.2.2 (parser.php file) Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications =================================================================== phpCMS 1.2.2 parser.php file Remote File Disclosure Vulnerability =================================================================== Digital Security Research Group DSecR...
PT-2008-2007 · Oki · Oki C5510Mfp Printer
Name of the Vulnerable Software and Affected Versions: OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 Description: The issue allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777, as the printer sends its configuration...
BoastMachine 3.1 - mail.php id SQL Injection
BoastMachine 3.1 - mail.php id SQL Injection ...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members &...
FaScript FaPersianHack 1.0 - SQL Injection
FaScript FaPersianHack 1.0 - SQL Injection FaScript FaPersianHack v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://fascript.com/fapersianhack.zip Injection Adress : http://Sitename/ph/show.php?id= Help : In This Script Admin Username and Password Save in...
Binn SBuilder (nid) Remote Blind Sql Injection Vulnerabily
Info: Software: Binn SBuilder HomePage: http://www.cms.ge/ Exploit: Blind Sql Injection High Where: fulltext.php?nid= Bug Found By: JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Dork: "Powered by CMS.GE" Dork2: priv8! + Important tables and columns: Tables: Table:...
binn-sql.txt
--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Binn SBuilder nid Remote Blind Sql Injection Vulnerabily +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...
Binn SBuilder - 'nid' Blind SQL Injection
--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Binn SBuilder nid Remote Blind Sql Injection Vulnerabily +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...
upload-change.txt
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3...
UploadImageUploadScript 1.0 - Remote Change Admin Password
UploadImageUploadScript 1.0 - Remote Change Admin Password 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; re...
UploadImage/UploadScript 1.0 Remote Change Admin Password Exploit
Exploit for unknown platform in category web applications ================================================================= UploadImage/UploadScript 1.0 Remote Change Admin Password Exploit ================================================================= 126 $result.=" ."; else $result.=" "...
UploadImage/UploadScript 1.0 - Remote Change Admin Password
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d...
CVE-2007-6635
FAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin password in cleartext in a database, which might allow context-dependent attackers to obtain the password via unspecified database access...
CVE-2007-6635
FAQMasterFlexPlus (likely Version 1.5 or 1.52) stores the admin password in cleartext in a database. The underlying issue is the insecure storage of credentials, enabling context-dependent attackers who gain access to the database to obtain the password. The documents do not specify additional af...
hotornot-backup.txt
Name : Hot or Not Clone by Jnshosts.com Dump backup And See Password Admin Download From : http://www.jnshosts.com/downloads/hot-or-not-clone-script/index.php Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Copyright @ 2007 Powered By Hot or Not Clone by Jnshosts.com Rate My Pic ::...