CVE-2006-1541

SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter...

Improper access control

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd...

CVE-2006-1412

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd...

PHPCollab 2.x NetOffice 2.x - sendpassword.php SQL Injection

PHPCollab 2.x NetOffice 2.x - sendpassword.php SQL Injection !/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n\r\n"; echo "a googledork: intitle:phpcollab|netoffice "index of" -www-apps -php-collab.org -ext:xml\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path email...

SPIP < 1.8.2-g SQL Injection and XSS Flaws

The remote web server has a PHP application that is affected by multiple flaws. Description: The remote host is running SPIP, an open-source CMS written in PHP. The remote version of this software is prone to SQL injection and cross site scripting attacks. An attacker could send specially crafted...

TFT Gallery 0.10 - Password Disclosure

!/usr/bin/perl Copyright C undefined1 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This program is...

Advisory-20.txt

/ -------------------------------------------------------- Neo Security Team NST� - Advisory 20 - 04/03/06 -------------------------------------------------------- Program: Pixel Post Homepage: http://photoblogger.halof.de/ Vulnerable Versions: 3.0 and lower versions. Risk: High! Impact: Critical...

CVE-2006-0843

Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password...

[HSC Security Group] Multiple SQL injection/XSS in SimpleBlog 2.1

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Risk: High - Note from the author Simple Blog is a free weblog application intended for personal use. The latest version, 2.1, features xhtml/css template structure, rss feed, blog calendar and an easy to use...

cijfer-mnxpl.pl.txt

!/usr/bin/perl Magic News Plus All rights reserved. An input validation flaw exists within 'settings.php' of Magic News Plus which can lead to the changing of the administrative password. Here is where the problem is line 108 of 426: ... 1 elseif $action == "change" ... 2 if $passwd !=...

Magic News Plus 1.0.3 - Admin Pass Change

!/usr/bin/perl Magic News Plus All rights reserved. An input validation flaw exists within 'settings.php' of Magic News Plus which can lead to the changing of the administrative password. Here is where the problem is line 108 of 426: ... 1 elseif $action == "change" ... 2 if $passwd !=...

[eVuln] PHPjournaler SQL Injection Vulnerability

New eVuln Advisory: PHPjournaler SQL Injection Vulnerability --------------------Summary---------------- Software: PHPjournaler Versions: 1.0 Critical Level: Moderate Type: SQL Injection Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: Aliaksandr Hartsuyeu...

Unclassified NewsBoard 1.5.3 Patch 3 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Unclassified NewsBoard 1.5.3 Patch 3 Blind SQL Injection Exploit ================================================================ ?php ---UNB153pl3xpl.php 11.35 12/11/2005...

Sun JavaServer Default Admin Password (HTTP)

This host is running the Sun JavaServer. This server has the default username and password of admin. SPDX-FileCopyrightText: 2002 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

versatileBulletinBoard 1.00 RC2 (board takeover) SQL Injection Exploit

No description provided by source. ?php --- versatilexpl.php 4.08 11/10/2005 versatileBulletinBoard 1.00 RC2 possibly prior versions SQL injection / board takeover this exploit describes the vulnerability described here: http://rgod.altervista.org/versatile100RC2.html with a change: with...

versatileBulletinBoard 1.00 RC2 - Board Takeover (SQL Injection)

?php --- versatilexpl.php 4.08 11/10/2005 versatileBulletinBoard 1.00 RC2 possibly prior versions SQL injection / board takeover this exploit describes the vulnerability described here: http://rgod.altervista.org/versatile100RC2.html with a change: with magicquotes both on or off, you can reset...

Utopia News Pro 1.1.3 SQL Injection / cross site scripting

2.56 07/10/2005 Utopia News Pro 1.1.3 SQL Injection / cross site scripting software: site: http://www.utopiasoftware.net axss: http://target/path/header.php?sitetitle=/titlescriptalertdocument.cookie/script!-- http://target/path/footer.php?version=scriptalertdocument.cookie/script...

On the s6 su Admin Password Sniffer-vulnerability warning-the black bar safety net

A long time ago ago, FlashSky in the security focus of the above is a review Paper On Introduction to the use of the port dynamic re-binding technology Sniffer. The principle is very simple, I will not repeat it, interested can turn out to look. I this little tool is in Him is given the code base...

MailGust 1.9 - Board Takeover (SQL Injection)

MailGust 1.9 - Board Takeover SQL Injection ?php mailgustxpl.php MailGust 1.9 possibly prior versions SQL Injection / board takeover poc exploit with generic HTTP proxy support by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script:...

SimplePHPBlog Arbitrary File Deletion and Sample Exploit

SimplePHPBlog has a vulnerability in its commentdeletecgi.php. The PHP script allows for the arbitrary deletion of files. Please see following link for a perl script to demonstrate the exploit: http://www.ftusecurity.com/pub/sphpblogvulns Please add .pl extension as my ISP server preprocesses the...