152 matches found
Design/Logic Flaw
The generateadminpassword function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack...
redhat-ds: setup script insecure .inf file permissions
The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...
SQL injection in OSCommerce Add-On Visitor Web Stats
Popular OSC add-on Visitor Web Stats is completely vulnerable to SQL injections. Although it uses request data i. e. the Accept-Language header, there's no escaping at all. This also applies to the extension's derivative for OSC 3, who's author completely inherited the insufficient code structure...
Comdev News Publisher 4.1.2 - SQL Injection
--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...
Traffic Stats - referralUrl.php?offset SQL Injection
Traffic Stats - referralUrl.php?offset SQL Injection --==+================================================================================+==-- --==+ Traffic Stats SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...
Traffic Stats (referralUrl.php offset) Remote SQL Injection Vulnerbility
Exploit for unknown platform in category web applications ======================================================================== Traffic Stats referralUrl.php offset Remote SQL Injection Vulnerbility ========================================================================...
buddy-sql.txt
--==+================================================================================+==-- --==+ Buddy Zone Version 1.5 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...
eWebquiz 8 - 'eWebQuiz.asp' SQL Injection
eWebquiz //'=============================================================================================== //'Script Name: eWebquiz eWebquiz Ta...
Kisisel Site 2007 (tr) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= Kisisel Site 2007 tr Remote SQL Injection Vulnerability ========================================================= Ki.isel Site 2007 tr == SQL Injection Vulnerability Author : cl24zy...
CosmicShoppingCart - search.php SQL Injection
CosmicShoppingCart - search.php SQL Injection Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, th...
PHP-Nuke 6.x < 7.6 Top module - SQL Injection
/bin/bash This is just basic-ly modules.php?name=Top&querylang=union%20select%200,pwd,0,0%20from%20nukeauthors%20where%20radminsuper=1 works thou /str0ke PHPNuke Top Module Remote SQL Injection by Fabrizi Andrea 2005 andrea.fabrizi at gmail.com Work with the PHPNuke latest version! URL=$1;...