RantX 1.0 Insecure Admin Authentication Vulnerability

Exploit for unknown platform in category web applications ===================================================== RantX 1.0 Insecure Admin Authentication Vulnerability =====================================================...

RantX 1.0 - Insecure Admin Authentication

--==+================================================================================+==-- --==+ RantX 1.0 Insecure Admin Authentication Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 14 MAY 200...

CVE-2008-1866

admin/modifconfig.php in Blog Pixel Motion aka PixelMotion does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct...

Design/Logic Flaw

admin/modifconfig.php in Blog Pixel Motion aka PixelMotion does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct...

CVE-2008-1866

The CVE-2008-1866 issue affects Blog Pixel Motion (PixelMotion), where admin/modif_config.php does not require admin authentication. This allows remote authenticated users to upload arbitrary PHP scripts inside a ZIP archive, which is written to templateZip/ and then automatically extracted under...

KnowledgeQuest 2.6 - SQL Injection

KnowledgeQuest 2.6 - SQL Injection ...:::::KnowledgeQuest 2.6 SQL Injection Vulnerabilities ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all...

KnowledgeQuest 2.6 SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================ KnowledgeQuest 2.6 SQL Injection Vulnerabilities ================================================ ...:::::KnowledgeQuest 2.6 SQL Injection Vulnerabilities ::::.... -------- Discoverd By...

KnowledgeQuest 2.6 - SQL Injection

...:::::KnowledgeQuest 2.6 SQL Injection Vulnerabilities ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in...

php-addressbook v2.0 SQL Injection Vulnerbility

php-addressbook v2.0 SQL Injection Vulnerbility admin Authentication bypass Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the...

phpaddressbook-sql.txt

php-addressbook v2.0 SQL Injection Vulnerbility admin Authentication bypass Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the...

Help Center Live < 2.1.5 Admin Authentication Bypass

Binary data 4162.prm...

JBlog 1.0 - Create / Delete Admin Authentication Bypass

xss Here&pcomm=com cookies Manipulation: -------------------- The POST variable 'search' in /jblog/recherche.php also The Cookie variable 'theme' is affected and can be set to : also we can do this : ' or : ' This is a small exemple of Inject Cookie Xploit Cookie Manipulation...

Rookie looking for a loophole---the penetration site of“reflection”-vulnerability warning-the black bar safety net

Things causes is QQ a friend sent me a site, say like there is a loophole, because this friend is just contact the network security aspect, I took to the site a look, really the so-called porous yeah, of course this site is not going to be the little black miss home obviously be people hanging on...

CVE-2007-3451

PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to execute arbitrary PHP code via a URL in the pg parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP code via a URL in the supadbpath parameter to 1 commonfunctions.php, 2 adminauthcookies.php, 3 adminmods.php, 4 adminnews.php, 5 admintopics.php, 6 adminusers.php, 7...

Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution

Exploit for unknown platform in category web applications ============================================================== Net Portal Dynamic System NPDS Options OPTIONS | -proxy If you wanna use a proxy | -proxyauth Basic authentification ";exit1; $url = getparam'url',1; $pro = getparam'proxy'; $p...

Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (1)

Net Portal Dynamic System NPDS 5.10 - Remote Code Execution 1 !/usr/bin/php Options OPTIONS | -proxy If you wanna use a proxy | -proxyauth Basic authentification ";exit1; $url = getparam'url',1; $pro = getparam'proxy'; $pra = getparam'proyauth'; $xpl = new phpsploit; $xpl-agent'Mozilla Firefox';...

Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (1)

!/usr/bin/php Options OPTIONS | -proxy If you wanna use a proxy | -proxyauth Basic authentification ";exit1; $url = getparam'url',1; $pro = getparam'proxy'; $pra = getparam'proyauth'; $xpl = new phpsploit; $xpl-agent'Mozilla Firefox'; if$pro $xpl-proxy$pro; if$pra $xpl-proxyauth$pra; +print.php S...

liens_dynamiques xss and admin authentification

liensdynamiques xss and admin authentification By : sn0oPy Risk : high Site : http://xentraz.free.fr/ Dork : "liensdynamiques" | "liensdynamiques2.1" exploit : + inject any script on the add menu "liens.php3?ajouter=1", you cas del it without admin permission one the del menu...

EternalMart Guestbook 1.10 (admin/auth.php) Remote Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================= EternalMart Guestbook 1.10 admin/auth.php Remote Inclusion Vuln ================================================================= EternalMart Guestbook 1.1.0 emgbadminpath...