Jax Calendar 1.34 Remote Admin Access Exploit

Exploit for unknown platform in category web applications ============================================= Jax Calendar 1.34 Remote Admin Access Exploit ============================================= Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora...

Jax Calendar 1.34 Remote Admin Access Exploit

No description provided by source. Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34 Remote...

Jevonweb Guestbook - Remote Admin Access

Jevonweb Guestbook - Remote Admin Access Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook"...

Jevonweb Guestbook Remote Admin Access Exploit

No description provided by source. Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook"...

Jevonweb Guestbook Remote Admin Access Exploit

Exploit for unknown platform in category web applications ============================================== Jevonweb Guestbook Remote Admin Access Exploit ============================================== Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux...

Jevonweb Guestbook - Remote Admin Access

Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook" "http://www.jevonweb.f2s.com/"...

BOLDfx eUploader 3.1.1 - 'admin.php' Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/41783/info BOLDfx eUploader is prone to multiple remote vulnerabilities, including a cross-site request-forgery vulnerability, a security-bypass vulnerability, and an HTML-injection vulnerability. Attacker-supplied HTML and script code could run in the...

Viscacha 0.8 Gold Cross Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...

Viscacha 0.8 Gold - Persistent Cross-Site Scripting

Viscacha 0.8 Gold - Persistent Cross-Site Scripting Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed...

Robert Zimmerman PHP MySQL Scripts - Authentication Bypass

Robert Zimmerman PHP MySQL Scripts - Authentication Bypass --------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPTS ADMIN BYPASS - --------------------------------------------------- EXPLOIT : Login : '-' Pass : '-' And u Got admin acces ; / hakerzy ze szkocji ;...

PHP / MYSQL Scripts Admin Bypass

Exploit for unknown platform in category web applications ================================================= Robert Zimmerman PHP / MYSQL Scripts Admin Bypass ================================================= --------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPT...

Robert Zimmerman PHP / MYSQL Scripts Admin Bypass

No description provided by source. --------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPTS ADMIN BYPASS - --------------------------------------------------- EXPLOIT : Login : '-' Pass : '-' And u Got admin acces ; / hakerzy ze szkocji ;...

OS Commerce 2.2r2 - Authentication Bypass

OS Commerce 2.2r2 - Authentication Bypass When this hole was brought to our attention, we were amazed to find that it seems nobody has caught it yet!! There is a page in the admin that can be access without login AND can pass parameters!! /admin/mail.php/login.php /admin/mail.php/login.php?fooled...

Time Warner Router Flaw Exposes Customers

There’s a rudimentary vulnerability in a cable modem/wireless router installed in tens of thousands of homes by Time Warner that could enable an attacker to get full access to the router quite easily. The vulnerability, which was discovered and disclosed recently by a blogger named David Chen, is...

CVE-2009-3596

JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to bypass authentication and gain administrative access via a direct request...

CVE-2009-3168

CVE-2009-3168 affects Mevin Productions Basic PHP Events Lister 2.0. The vulnerability arises from improper access restriction to admin/reset.php and admin/user_add.php, allowing remote authenticated users to reset administrative passwords or add administrators via a direct request. Multiple conn...

Php168 v6 mention the right vulnerability-vulnerability warning-the black bar safety net

? php printr' +---------------------------------------------------------------------------+ Php168 v6. 0 update user access exploit +---------------------------------------------------------------------------+ '; / works regardless of php. ini settings / if $argc 5 printr'...

CVE-2008-7155

NetRisk 1.9.7 does not properly restrict access to admin/changesubmit.php, which allows remote attackers to change the password of arbitrary users via a direct request...

DVBBS php v2.0 boardrule.php注入漏洞

PHP2.0＋＋功能介绍： 一、 断点数据库备份，保持所备份的数据和论坛数据同步； 二、 多种形式Url rewrite 伪静态，提高SEO； 三、 多线程信息采集，减少人工操作繁琐度； 四、 自动升级采用多线程断点续传PHP下载模块； 五、 国际论坛界中独创了一个文件安装论坛； 六、 创新、贴心的新发贴回贴模式正在启用---动网PHP2.0++再创佳绩； 七、 发挥PHP优点，大量采用成熟的缓存机制 八、 全优的后台搜索功能； 九、 用户体验 boardrule.php存在sql注入漏洞。 DVBBS php v2.0 暂无 http://p.dvbbs.net/...

CVE-2008-7124

zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allows remote attackers to gain administrator privileges via a direct request, as demonstrated by adding a new administrator...