Xtreme ASP Photo Gallery

Tripbit Security Research tripbit.org Security Advisory Advisory ID: TA-150104 Release Date: January 15th, 2004 Application: Xtreme ASP Photo Gallery 2.0 Severity: Medium/High Impact: Admin access Class: Input Validation Error Vendor: http:// www.pensacolawebdesigns.com/ Overview...

TA-150104.txt

Tripbit Security Research tripbit.org Security Advisory Advisory ID: TA-150104 Release Date: January 15th, 2004 Application: Xtreme ASP Photo Gallery 2.0 Severity: Medium/High Impact: Admin access Class: Input Validation Error Vendor: http:// www.pensacolawebdesigns.com/ Overview...

Get admin level on Goldlink script v3.0

There is a bug in script of links Goldlink v3.0 http://www.goldscripts.com/goldlink.php. You can access to panel with admin privileges. The bug is in variables.php file: function Acceso global $extension; global $tbadmin; global $HTTPCOOKIEVARS; $vadminlogin=$HTTPCOOKIEVARS"vadminlogin";...

deskpro.sql.txt

Multiple SQL Injection Vulnerabilities in DeskPRO ------------------------------------------------------------------------- Article reference: http://www.securiteam.com/unixfocus/6R0052K8KM.html SUMMARY DeskPRO http://www.deskpro.com is "an integrated script to manage your customer sales and...

Admin Access Vulnerability in Community Wizard

Admin Access Vulnerability in Community Wizard Affected Systems: Community Wizard version: 5.1 and possibly earlier versions Vendor: http://www.sepcity.com , http://www.commwiz.com Issue: gain admin access Released: 18 September 2003 Introduction: ============= "Community Wizard allows anyone to...

[UNIX] Vulnerability in Bandsite Allows Gaining Admin Access

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

bandwebsite.txt

Informations : °°°°°°°°°°°°°° - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : Jelle de Vos - Tested version :1.5 - Problem : vulnerability in Bandsite Allows Gaining Admin Access. Product Description : °°°°°°°°°°°°°°°°°°°°° Bandsite is an...

CVE-2003-0640

BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges...

diginews.txt

Digi-news and Digi-ads version 1.1 admin access without password .oO Overview Oo. Digi-news and Digi-ads version 1.1 admin access without password Discovered on 2003, March, 30th Vendor: Digi-FX Digi-news 1.1 is a PHP news editor. It allows you to easily add, edit, and delete news. Digi-ad 1.1 is...

Digi-news and Digi-ads version 1.1 admin access without password

Digi-news and Digi-ads version 1.1 admin access without password .oO Overview Oo. Digi-news and Digi-ads version 1.1 admin access without password Discovered on 2003, March, 30th Vendor: Digi-FX Digi-news 1.1 is a PHP news editor. It allows you to easily add, edit, and delete news. Digi-ad 1.1 is...

CyberStrong Shopping Cart - Advisory & Exploit Code

Advisory Name: Cyberstrong eShop SQL Injection Vulnerability Release Date: 05/07/2003 Application: CyberStrong eShop v4.2 Platform: Win32/MSSQL Severity: High BUG Type: SQL Injection Discover by: AresU [email protected] Author: Bosen [email protected] Vendor Status: See below. Vendor URL:...

pnews.txt

Admin Access Vulnerability in P-News 1.6 Url: http://www.ppopn.net It is possible to gain admin access if you possess a 'Member' account due to a flaw in the 'p-news.php' file. You can inject an entire arbitrary account, including all the fields, into the 'Name' field, which will push all the...

OneOrZero Security Problems (PHP)

Informations : °°°°°°°°°°°°°° Website : http://www.oneorzero.com Version : 1.4 rc4 Problems : - SQL Injection - Admin Access PHP Code/Location : °°°°°°°°°°°°°°°°°°° supporter/tupdate.php : -------------------------------------------------------------------------- if$groupid == 'change' $sql =...

posterv2.txt

Hi Guys, This is my first time posting a vulnerability since most of my private research has been done on very small projects, many of which were never released. Anyways, down to the vulnerability: Poster version.two privilege escalation: ======================================== Poster version.tw...

miniPortail (PHP) : Admin Access

Informations : °°°°°°°°°°°°°° Language : PHP Website : http://www.aldweb.com/ Version : 1.9, 2.0, 2.1, 2.2 and less ? Problem : Admin Access PHP Code/Location : °°°°°°°°°°°°°°°°°°° admin/admin.php :...

truegalerie.txt

Informations : °°°°°°°°°°°°°° Language : PHP Website : http://www.truelogik.net Version : 1.0 Problems : - Admin Access - File Copy PHP Code/Location : °°°°°°°°°°°°°°°°°°° verifadmin.php, checkadmin.php : ------------------------------------------------------------------------ "; echo ""; echo...

Admin access in GuestBook r4

Product: GuestBook Version: release 4 OffSite: http://www.lasource.r2.ru/ Problem: Admin access -------------------------------------- You may use admin panel. Get the password there: http://target/cgi-bin/guestbook/passwd The password don't crypt : Contacts: www.overg.com www.dwcgr0up.com...

Disclosing information in Super GuestBook

Product: Super GuestBook Version: 1.0 OffSite: http://www.lasource.r2.ru/ Problem: Disclosing information ----------------------------------------- View file http://target/cgi-bin/SGBDIR/superguestconfig and you view configuration of the Super guestbook. View "Password" field and you view passwor...

CVE-2002-0494

The CVE-2002-0494 entry describes a Cross-site scripting vulnerability in WebSight Directory System 0.1 that lets remote attackers execute arbitrary JavaScript and potentially gain access to the WebSight administrator via a link submission containing the script in a website name. Affected compone...

hwdeGUEST

Product : hwdeGUEST Version : 2.0 WebSite : http://hwde.de Problem : Admin access rus Description: ------------ var.dat: ======== ... //Your username $benutzername="hwde"; //Your password $benutzerpasswort="SOFT"; ... ========= Exploit: -------- http://somehost/guestbook/var.dat Contacts: -------...