4093 matches found
[waraxe-2007-SA#053] - Critical Sql Injection in NukeSentinel 2.5.11
waraxe-2007-SA053 - Critical Sql Injection in NukeSentinel 2.5.11 ==================================================================== Author: Janek Vind "waraxe" Date: 25. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-53.html Target software description:...
waraxe-2007-SA052.txt
waraxe-2007-SA052 - dBlog CMS Open Source database retrieval ==================================================================== Author: Janek Vind "waraxe" Date: 19. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-52.html Target software description:...
Authentication flaw
captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...
CVE-2007-4230
BellaBiblio is affected by a cookie-based privilege escalation where a bellabiblio cookie with the value “administrator” can grant remote admin privileges. The issue’s root cause involves cookie value validation, but this is disputed: several sources state the cookie value must be an MD5 hash rat...
PT-2007-5423 · Unknown · Bellabiblio
Name of the Vulnerable Software and Affected Versions: BellaBiblio affected versions not specified Description: The issue allows remote attackers to potentially gain administrative privileges. It involves setting a bellabiblio cookie with a specific value. However, it's noted that the cookie valu...
CVE-2007-4153
Multiple cross-site scripting XSS vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the Options Database Table in the Admin Panel, accessed through options.php; or 2 the opmlurl parameter to link-import.php. NOTE: this might...
Cross site scripting
Cross-site scripting XSS vulnerability in the LoginToboggan module 5.x-1.x-dev before 20070712 for Drupal allows remote authenticated users with "administer blocks" permission to inject arbitrary JavaScript and gain privileges via "the message displayed above the default user login block."...
CVE-2007-3643
admin/index.php in AV Arcade 2.1b grants administrative privileges when the avauserid cookie value is 1, which allows remote attackers to perform certain administrative actions...
Code injection
admin/index.php in AV Arcade 2.1b grants administrative privileges when the avauserid cookie value is 1, which allows remote attackers to perform certain administrative actions...
CVE-2007-3643
admin/index.php in AV Arcade 2.1b grants administrative privileges when the avauserid cookie value is 1, which allows remote attackers to perform certain administrative actions...
Design/Logic Flaw
MyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter, as demonstrated by a post to admin/settings.php that injects PHP code into settings.inc, which can then be executed via a direct request to index.php...
CVE-2007-3587
MyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter, as demonstrated by a post to admin/settings.php that injects PHP code into settings.inc, which can then be executed via a direct request to index.php...
phpfaber-include.txt
phpFaber TopSites v.3index.phpRemote File Disclosure Vulnerability D.Script: http://www.phpfaber.com/cmscontent/files/phpfabertopsites.zip Discovered by: Dr.RoVeR --Arab48 Hacker [email protected] Greetz To: Tryag Team You have to be admin to run the script :D V.Code: if !$GET'page' ||...
CVE-2007-1725
SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL commands via the filename of an uploaded file to the avatar function, as demonstrated by setting admin privileges...
CVE-2007-1471
admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a direct URL request for admin/AdminBlogNewsEdit.asp...
Nessus Windows Scan Not Performed with Admin Privileges
The Nessus scanner testing the remote host has been given SMB credentials to log into the remote host, however these credentials do not have administrative privileges. Typically, when Nessus performs a patch audit, it logs into the remote host and reads the version of the DLLs on the remote host ...
CVE-2007-1187
WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via 1 the Forum Archive feature and 2 Recent Searches...
vBulletin 3.6.4 - inlinemod.php?postids SQL Injection
vBulletin 3.6.4 - inlinemod.php?postids SQL Injection input-cleanarraygpc'p', array 'postids' = TYPESTR, ; $postids = exp...