phpMyFamily <= 1.4.0 - SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w phpMyFamily Exploit injection ============================== $banner = phpMyFamily Exploit injection \n\n============================== \n\nINFGPG-Hacking&Security Research; Greats: AresU 1st IndoSec Team,ADZ Security Team has discovered bugs...

Joomla Component com_countries SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comcountries SQL Injection Vulnerability Author : FL0RiX Name : comcountries Greez : Deep-Power, PyskE,Septemb0x,KaCaK Bug Type : SQL Injection Infection : Admin login bilgileri alinabili...

blindblog 1.3.1 (sql/ab/lfi) Multiple Vulnerabilities

No description provided by source. Salvatore drosophila Fresta + Application: BlindBlog + Version: 1.3.1 + Website: http://sourceforge.net/projects/cbblog/ + Bugs: A SQL Injection B Authentication Bypass C Local File Inclusion + Exploitation: Remote + Date: 03 Mar 2009 + Discovered by: Salvatore...

Auction_Software Script Admin Login Bypass vulnerability

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : AuctionSoftware Script Admin Login Bypass vulnerability vendor URL :http://www.brotherscripts.com/ Price: $24.95 Author : altbta l9athotmail.com dork : PHPAuction GPL Enhanced V2.51 ...

DouPHP轻量级企业建站系统后台任意文件删除缺陷

简要描述： 某处未验证删除的文件路径，导致可以删除任意文件。 官网演示站测试通过 详细说明： 漏洞文件: /admin/backup.php 第161行 / +---------------------------------------------------------- 备份删除 +---------------------------------------------------------- / if $REQUEST'rec' == 'del' $sqlfilename = $GET'sqlfilename'; if $POST'confirm' if...

Maccms 最新注入一枚。

简要描述： 看到maccms又更新了 果断下来看看。 本来可以Sql的地方还挺多。。 但是由于自带的360防注入脚本。。我没办法绕过。 还是找到了一处, 如果没这防注入的话可以直接利用这注入登录后台。。 可是。。 老老实实盲注把。 详细说明： maccms 基本上都是调用be函数来代替$POST之类的。 都做了addslashes。 在admin/adminconn.php中 function chkLogin global $db; $mid = getCookie'adminid'; $mname = getCookie'adminname'; $mcheck =...

PT-2014-5567 · D Link · D-Link Dap-1350

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1350 versions 1.14 and earlier Description: The issue concerns SQL injection vulnerabilities in the administration login page. Remote attackers can execute arbitrary SQL commands via the username or password variables...

BEESCMS 3.4 /admin.php 登录绕过漏洞

No description provided by source...

CVE-2013-4722

Multiple cross-site scripting XSS vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 url, 3 qstr parameter...

CVE-2013-4722

Multiple cross-site scripting XSS vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 url, 3 qstr parameter...

CVE-2013-4722

CVE-2013-4722 affects Acora CMS (DDSN cm3 Acora CMS) prior to or within versions 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1. The vulnerability is a reflected cross-site scripting (XSS) in Admin/login/default.asp caused by insufficient input validation and lack of output escaping for parameters us...

74cms某功能注入漏洞（有条件）

简要描述： 略鸡肋,分享出来。 详细说明： 最新版v3.4，更新时间20140310 文件/plus/weixin.php responseMsg函数，使用 $postStr = $GLOBALS"HTTPRAWPOSTDATA"; 获得了post数据。所以，可以无视GPC。 获得的数据是XML格式，我们一会发送数据包即可。 继续看该函数： if !empty$postStr $postObj = simplexmlloadstring$postStr, 'SimpleXMLElement', LIBXMLNOCDATA; $fromUsername =...

McAfee Web Gateway User Interface Default Credentials

The remote McAfee Web Gateway user interface uses a known set of default credentials. Knowing these, an attacker with access to service can gain administrative access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Ring Jordan SQL Injection Vulnerability

Ring Jordan suffers from a remote SQL injection vulnerability in their administrative functionality. The author has tried to contact the vendor and has received no response. The SQL injection issue allows for authentication bypass. RINGJORDAN SQL Injection Time-Line...

LiveZilla < 5.1.1.0 Multiple Vulnerabilities

The version of LiveZilla hosted on the remote web server is affected by multiple vulnerabilities : - The application saves admin login details in a 1 click XML file. This allows a local attacker to obtain admin login credentials. CVE-2013-6223 - The application is affected by multiple cross-site...

RASPcalendar 1.01 SQL Injection

--------------------------------------------------- RASPcalendar 1.01 ASP Admin Login Vlunerabilities --------------------------------------------------- Author : Hackeri-AL Date : 06-11-2013 Vendor Homepage : http://www.rttucson.com/files.html Software link :...

RASPcalendar 1.01 - Admin Login bypass Vulnerability

Exploit for asp platform in category web applications --------------------------------------------------- RASPcalendar 1.01 - Admin Login bypass Vulnerability --------------------------------------------------- Author : Hackeri-AL Date : 06-11-2013 Vendor Homepage :...

RASPcalendar 1.01 (ASP) - Admin Login

--------------------------------------------------- RASPcalendar 1.01 ASP Admin Login Vlunerabilities --------------------------------------------------- Author : Hackeri-AL Date : 06-11-2013 Vendor Homepage : http://www.rttucson.com/files.html Software link :...

RASPcalendar 1.01 (ASP) - Admin Login

RASPcalendar 1.01 ASP - Admin Login --------------------------------------------------- RASPcalendar 1.01 ASP Admin Login Vlunerabilities --------------------------------------------------- Author : Hackeri-AL Date : 06-11-2013 Vendor Homepage : http://www.rttucson.com/files.html Software link :...

OpenEMR 4.1.1 Patch 14 SQLi Privilege Escalation Remote Code Execution

This Metasploit module exploits a vulnerability found in OpenEMR version 4.1.1 Patch 14 and lower. When logging in as any non-admin user it's possible to retrieve the admin SHA1 password hash from the database through SQL injection. The SQL injection vulnerability exists in the...