2796 matches found
VigileCMS 1.4 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ============================================= VigileCMS 1.4 Multiple Remote Vulnerabilities ============================================= --------------------------------------------------------------------------------------- . .. | / || |...
Vigile CMS 1.4 - Multiple Vulnerabilities
--------------------------------------------------------------------------------------- . .. | / || | / |/ \ / / | | \ \ | | \ / \ / \ / // \ /\ /| | |/ | | /| | \ | \ \ |\ / || // || /|| / / / / / ---------------------------------------------------------------------------------------...
Softbiz Link Directory Script - SQL Injection
Links Directory Script SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Powered by SoftbizScripts" "OUR SPONSORS" Injection Adress : http://server.com/searchresult.php?sbcatid= SQL C0de For Find admin Username :...
ASP Message Board 2.2.1c Remote SQL Injection Vulnerability
No description provided by source. Bug Found On : "ASP Message Board" Found By : Q7x Home : Www.Larestankids.coM Ashiyane2 Security Team Dork : inurl:"printer.asp?forum=" Version : 2.2.1c Bug : ASP Message Board - printer.asp - Remote Sql Injection Exploit Exploit : Admin User / Password :...
Improper access control
dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...
CVE-2007-5026
dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...
CVE-2007-5026
dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...
Cross site request forgery (csrf)
The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP...
CVE-2007-4915
The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP...
CVE-2007-4915
The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP...
Cocoon Counter statistics program background written mA-vulnerability warning-the black bar safety net
Reference the latest Ocean to the top of the eval version in a few words, here to use is % eval reques tchr 3 5 % , "evalExecutePP. htm in the text box write your own code is added with 2006X2. exe conversion to generate the html text box in code. What is the text box you know? Don't just check t...
Improper access control
PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing...
CVE-2007-4157
PHPBlogger stores sensitive information under the web root with insufficient access control, allowing remote retrieval of data/pref.db. The retrieved database contains the admin password hash, which can be used to craft authentication cookies and gain administrative access without the cleartext p...
CVE-2007-4157
PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing...
Hunkaray Okul Portali v1.1 (tr) Sql injection Vuln
///////////Yollubunlar.Org/////////// Title : Hunkaray Okul Portali v1.1 tr Sql injection Vuln Author : Yollubunlar Orginal: http://yollubunlar.org/hunkaray-okul-portali-v11-tr-sql-injection-vuln-44.html Web Page :www.yollubunlar.orgg Contact : [email protected] Acik : in duyuruoku.asp...
PHPBlogger is a simple tool to help the creation of web blogs... Encrypted admin password and other preferences are stored on /data/pref.db You can find lots of them exposed with google search: pref password= filetype:db = -------------------------------------------- The admin panel is acessible...
PHPBlogger cookie privilege escalation
PHPBlogger is a simple tool to help the creation of web blogs... Encrypted admin password and other preferences are stored on /data/pref.db You can find lots of them exposed with google search: pref password= filetype:db = -------------------------------------------- The admin panel is acessible...
QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability
No description provided by source. author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password:...
quickestore-sql.txt
author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1 union...
QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= QuickEStore = 8.2 insertorder.cfm Remote SQL Injection Vulnerability ======================================================================= web application:QuickEStor...