PlanetGallery - 'Gallery_admin.php' Authentication Bypass

source: https://www.securityfocus.com/bid/17753/info PlanetGallery is prone to an authentication-bypass vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. An attacker can exploit this issue to bypass authentication and gain admin access. Th...

Code injection

Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifying config.php...

adv_pixelpost.txt

/ -------------------------------------------------------- Neo Security Team NST� - Advisory 19 - 04/03/06 -------------------------------------------------------- Program: Pixel Post Homepage: http://www.pixelpost.org/ Vulnerable Versions: 1.4.3, 1.5 beta1 and possibly lower versions. Risk: High...

Pixel Post Multiple Vulnerabilities

/ -------------------------------------------------------- Neo Security Team NST - Advisory 19 - 04/03/06 -------------------------------------------------------- Program: Pixel Post Homepage: http://www.pixelpost.org/ Vulnerable Versions: 1.4.3, 1.5 beta1 and possibly lower versions. Risk: High!...

TotalECommerce <= 1.0 (index.asp id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= TotalECommerce http://victim/dir/index.asp?secao=PageID&id=SQL EXAMPLE 1 -...

CVE-2006-0478

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

Hardcoded credentials

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

CVE-2006-0478

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

Subdreamer CMS &#40;Pro 2.2.3 and Light 2.2.0.1&#41; security bug ;&#41;

Hello world ; A serious exploit has recently been discovered which will allow hackers to gain admin access to the latest versions of Subdreamer CMS Pro 2.2.3 and Light 2.2.0.1. It is crucial to patch your systems immediately. Affected files: admin/adminfunctions.php includes/functions.php...

CVE-2005-4838

Multiple cross-site scripting XSS vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 el/functions.jsp, 2 el/implicit-objects.jsp, and 3 jspx/textRotate.jspx in examples/jsp2/, as demonstrated via...

CVE-2004-2638

The CVE-2004-2638 vulnerability affects osCommerce 1.5.1 via the Admin Access With Levels plugin. The issue allows remote attackers to access files in the admin/ directory by setting in_login to a non-zero value, enabling partial confidentiality and integrity impact. No exploitation details or sp...

CVE-2004-2638

The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the inlogin parameter to a non-zero value...

CVE-2004-2638: Undefined Security Weakness

The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the inlogin parameter to a non-zero value...

CVE-2002-2176

The CVE-2002-2176 entry concerns Gender MOD 1.1.3, where a SQL injection vulnerability in the User Profile page (via the user_level parameter) allows remote attackers to gain administrative access. The vulnerability stems from improper handling of user_level input in the profile interface, enabli...

CVE-2005-3236

Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via 1 the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or 2 the nick parameter of lostpwd.php...

aspReady FAQ - open for SQL-injections

The free, open source project called "aspReady FAQ" is open for SQL-injection. This results is admin access with the ability change/delete the entire database. An example on SQL-inject that works could be: 1'or'1'='1 After doing a google search, I've found out that some companies are actually usi...

aspReadySQL.txt

The free, open source project called "aspReady FAQ" is open for SQL-injection. This results is admin access with the ability change/delete the entire database. An example on SQL-inject that works could be: 1'or'1'='1 After doing a google search, I've found out that some companies are actually usi...

Using the Webshell to get a individual who can't see the BBS administrators-vulnerability warning-the black bar safety net

Author: Snakehu & Senarie source: evil octal The article has been published in 2 0 0 5-1 0 issue of hacker line of Defense of Objectives: by the Webshell for the original file to modify to make yourself into an administrator, a conventional case will not be the administrator found. Purpose: easy...

Guest permissions break 8 law-vulnerability and early warning-the black bar safety net

Guest privilege escalation method summary: Now the invasion is more and more difficult, People's safety awareness have generally increased a lot, even the individual user to understand firewalls, antivirus software and to equipment in hand, for Microsoft's patch to upgrade also no longer is not...

Hesk Session ID Validation Vulnerability

OS2A Hesk Session ID Validation Vulnerability OS2A ID: OS2A1003 Status 9/13/2005 Issue Discovered 9/14/2005 Reported to the vendor 9/18/2005 Patch Released 9/20/2005 Advisory Released Class: Authentication Bypass Severity: CRITICAL Overview: Hesk is a PHP based help desk software that runs with a...