ZaoCMS Insecure Cookie Handling

-------------------------------------------------------------- ZaoCMS Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.zaocms.com/ Software : ZaoCMS...

ZaoCMS - Insecure Cookie Handling

-------------------------------------------------------------- ZaoCMS Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.zaocms.com/ Software : ZaoCMS...

ZaoCMS Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ============================================= ZaoCMS Insecure Cookie Handling Vulnerability ============================================= -------------------------------------------------------------- ZaoCMS Insecure Cookie Handling...

CVE-2009-1662

Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 Password fields, as reachable from admin/index.php...

CVE-2009-1662

Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 Password fields, as reachable from admin/index.php...

PHP Site Lock 2.0 - Insecure Cookie Handling

-------------------------------------+ Homepage:http://www.kalptarudemos.com Product: PHP Site Lock 2.0 home:www.h4ckf0ru.com ------------------------------------- PHP Site Lock 2.0 Insecure Cookie Handling Vuln ------------------------------------- Exploit: --------...

Sql injection

SQL injection vulnerability in admin/admlogin.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the adminusername parameter aka the admin field...

CVE-2008-6720

SQL injection vulnerability in admin/admlogin.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the adminusername parameter aka the admin field...

Back-End CMS 5.0 - 'main.asp?id' SQL Injection

BackendCMS Version 5.0 SQl Injection Prodcut: BackendCMS Version 5.0 Home : http://www.backendcms.dk/ Vunlerability : SQL Injection Dork : find it yourself Discovred by: AnGeL25dZ Contact : [email protected] Greetz to : ALLAH All Members of HackTeach All Members of http://islam-attack.com ra3ch...

Flex CMS Calendar (ItemId) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== FlexCMS Calendar ItemId Blind SQL Injection Vulnerability =========================================================== FlexCMS CalendarItemId Blind SQL Injection Vulnerability...

X-Forum 0.6.2 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Web App: X-Forum 0.6.2 Link : http://freefr.dl.sourceforge.net/sourceforge/x-forum/xforum-0.6.2.tar.gz Bug : Auth Bypass via Cookie Handling : There are also other SQL Injections Remote Command Execution Exploit Credits to Giovanni Buzzin,...

Diskos CMS Manager SQL Injection

Diskos CMS Manager & multiple vulnerabilitiesS Prodcut: Diskos CMS Manager Home : http://www.diskos.dk Vunlerability : SQL Injection & admin byapass & database disclosure Dork : "Powered By diskos" inurl:"side.asp?kat=1" Discovred by: AnGeL25dZ Contact : [email protected] Greetz to : ALLAH All...

X-Forum 0.6.2 Authentication Bypass

!/usr/bin/perl Web App: X-Forum 0.6.2 Link : http://freefr.dl.sourceforge.net/sourceforge/x-forum/xforum-0.6.2.tar.gz Bug : Auth Bypass via Cookie Handling : There are also other SQL Injections Remote Command Execution Exploit Credits to Giovanni Buzzin, "Osirys" Mail osirysatautisticidotorg It...

L-Forum 2.4.0 SQL Injection / Command Execution

!/usr/bin/perl Web App: L-Forum 2.4.0 Link : http://l-forum.sourceforge.net/ Bug : SQL INJECTIONS SQL Command Injection Exploit Needs MQ Off Dork: Copyright 2000-2001 Leszek 'Leon' Krupinski Credits to Giovanni Buzzin, "Osirys" Mail: osirysatautisticidotorg...

PhotoStand 1.2.0 Command Execution

!/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStand is vulnerable to SQL Injection, AUTH BYPAS...

Syzygy CMS 0.3 LFI/SQL Command Injection Exploit

Exploit for unknown platform in category web applications ================================================ Syzygy CMS 0.3 LFI/SQL Command Injection Exploit ================================================ !/usr/bin/perl Web App : Syzygy CMS 0.3 Link :...

Syzygy CMS 0.3 - Local File Inclusion SQL Injection

Syzygy CMS 0.3 - Local File Inclusion SQL Injection !/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shel...

CVE-2008-6503

Multiple cross-site scripting XSS vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin/login.php and 2 order.php...

CVE-2008-6503

Multiple cross-site scripting XSS vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin/login.php and 2 order.php...

UBB.threads 5.5.1 (message) Remote SQL Injection Vulnerability

No description provided by source. Discovered: 07-18-08 By: SecureState R&D Team sasquatch www.securestate.com Background: ----------- SQL injection has previously been discovered http://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regul...