Newbie CMS 0.0.2 - Insecure Cookie Authentication Bypass

Newbie CMS 0.0.2 - Insecure Cookie Authentication Bypass source: https://www.securityfocus.com/bid/38421/info Newbie CMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this...

statcountex 3.1 - Multiple Vulnerabilities

statcountex 3.1 - Multiple Vulnerabilities Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34 Version: 3.1 Tested on: Windows xp sp3 ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ / /| ' \ | | | | | | / | | | | | | | | | || ||...

statcountex 3.1 - Multiple Vulnerabilities

Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34 Version: 3.1 Tested on: Windows xp sp3 ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ / /| ' \ | | | | | | / | | | | | | | | | || || |||| ||//|| || ||...

StatCounteX 3.1 Database Disclosure / Administrative Access

Exploit Title: StatCounteX 3.1 Multiple Vulnerabilities Date: 12/02/2010 Author: Phenom Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34 Version: 3.1 Tested on: Windows xp sp3 CVE : Code : ------------------------------------------------------ | | | | | | | | /| ' \ ...

StatCounteX 3.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== StatCounteX 3.1 Multiple Vulnerabilities ======================================== Exploit Title: StatCounteX 3.1 Multiple Vulnerabilities Author: Phenom Software Link:...

Ke long shopping site management system vulnerability-vulnerability warning-the black bar safety net

Today to see a shopping site, readily guessing a backend admin, found that really have this background, and is directly into the background, and then verify what until after the jump back to the admin. asp this administrator login leaf surface. Since the flash is very fast, and did not see the...

CVE-2009-4584

admin.php in dB Masters Multimedia Links Directory 3.1.3 allows remote attackers to bypass authentication and gain administrative access via a certain value of the adminlog cookie...

AsePe Haber 1.1 SQL Injection

Application Name : AsePe Haber v1.1 Vulnerable Type : SQL Injection Google Keyword : AsePe Haber v1.1 Infection : Ynetici bilgileride dahil olmak üzere veritabanındaki tüm verilere erişim sağlanabilir. Elde edilen Ynetici şifresi ile sisteme giriş yapılarak haber vb. içerik eklemek suretiyle ilgi...

Jax Calendar 1.34 - Remote Admin Access

Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34 Remote Admin Access Exploit Author: Sora...

Jax Calendar 1.34 - Remote Admin Access

Jax Calendar 1.34 - Remote Admin Access Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34...

Jax Calendar 1.34 Remote Admin Access Exploit

Exploit for unknown platform in category web applications ============================================= Jax Calendar 1.34 Remote Admin Access Exploit ============================================= Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora...

Jevonweb Guestbook Administrative Access

Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook" "http://www.jevonweb.f2s.com/"...

Jax Calendar 1.34 Remote Admin Access Exploit

No description provided by source. Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34 Remote...

Jevonweb Guestbook - Remote Admin Access

Jevonweb Guestbook - Remote Admin Access Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook"...

Jevonweb Guestbook Remote Admin Access Exploit

Exploit for unknown platform in category web applications ============================================== Jevonweb Guestbook Remote Admin Access Exploit ============================================== Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux...

Jevonweb Guestbook Remote Admin Access Exploit

No description provided by source. Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook"...

Jevonweb Guestbook - Remote Admin Access

Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook" "http://www.jevonweb.f2s.com/"...

BOLDfx eUploader 3.1.1 - 'admin.php' Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/41783/info BOLDfx eUploader is prone to multiple remote vulnerabilities, including a cross-site request-forgery vulnerability, a security-bypass vulnerability, and an HTML-injection vulnerability. Attacker-supplied HTML and script code could run in the...

Viscacha 0.8 Gold - Persistent Cross-Site Scripting

Viscacha 0.8 Gold - Persistent Cross-Site Scripting Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed...

Viscacha 0.8 Gold Cross Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...