DMXReady Job Listing 1.1 - Remote Contents Change

Title : DMXReady Job Listing http://target/path//applications/JobListingManager/incjoblistingmanager.asp Edit - http://target/path//admin/JobListingManager/CategoryManager/list.asp : milw0rm.com 2009-01-14...

OwenPoll 1.0 Insecure Cookie Handling Vulnerability

No description provided by source. START 0x01 Informations: Script : OwenPoll 1.0 Download : http://www.hotscripts.com/jump.php?listingid=75178&jumptype=1 Vulnerability : Insecure Cookie Handling Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes : Proud to be Italian...

CVE-2008-5576

admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain administrative access via a large value of the currentuseruserslevel parameter...

CVE-2008-5423

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...

Default credentials

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...

Product Sale Framework 0.1b SQL Injection

+++++++++++++++++++++++In The Name Of Allah+++++++++++++++++++++++++++ + + + Product Sale Framework sql injection Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ APA Center of Yazd...

Simple Document Management System 1.1.4 SQL Injection Auth Bypass

No description provided by source. SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, thi...

premulti-sql.txt

Pre Multi-Vendor Shopping Malls idRemote SQL Injection Vulnerability -------------------------------------------------------------------------------- ---------------------------------------------------------------- script : Pre Multi-Vendor Shopping Malls script :...

CVE-2008-4622

The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative access by setting the fn-loggedin cookie to 1...

CVE-2008-4600

configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie...

CVE-2008-4600

configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie...

calendars-bypass.txt

Exploit discovered by SecVuln from http://secvuln.com Come join our clan! contact [email protected] Author == SecVuln Version == 4.02 Software == Calendars for the web by great hill corporation Calendars for the web has a vulnerability in the administration page. The page saves the past session...

Calendars for the Web 4.02 - Admin Authentication Bypass

Exploit discovered by SecVuln from http://secvuln.com Come join our clan! contact [email protected] Author == SecVuln Version == 4.02 Software == Calendars for the web by great hill corporation Calendars for the web has a vulnerability in the administration page. The page saves the past session...

Calendars for the Web 4.02 - Admin Authentication Bypass

Calendars for the Web 4.02 - Admin Authentication Bypass Exploit discovered by SecVuln from http://secvuln.com Come join our clan! contact [email protected] Author == SecVuln Version == 4.02 Software == Calendars for the web by great hill corporation Calendars for the web has a vulnerability in...

CVE-2008-4484

CVE-2008-4484 affects Crux Gallery 1.32 and earlier. The main.php file vulnerability allows remote attackers to gain administrative access by supplying a name parameter value of "users" (demonstrated via index.php). The NVD entry lists a public description and CVSS v2 base score of 6.8 (MEDIUM) w...

CVE-2008-4341

CVE-2008-4341 affects MyBlog 0.9.8 and earlier. The flaw allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin, indicating a broken/authentication check based on cookie values. The provided sources describe the vulnerabl...

PHP pro bid v 6.04 SQL injection

Affected software: PHP pro bid v 6.04 as at 2008-09-11 Vendor description: The Leading Proffessional sic Auction Script Software available online today written in PHP/ Mysql Impact: SQL injection Description: categories.php and other pages of php pro bid accept user-supplied order-by and ASC/DESC...

Stash 1.0.3 Insecure Cookie Handling Vulnerability

No description provided by source. ...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms :...

Stash 1.0.3 - Insecure Cookie Handling

Stash 1.0.3 - Insecure Cookie Handling ...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms :...

Stash 1.0.3 - Insecure Cookie Handling

...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms : http://sourceforge.net/project/showfiles.php?groupid=206129 -----------------------...