2390 matches found
CVE-2008-6905
CVE-2008-6905 affects BabbleBoard 1.1.6, with a CSRF vulnerability in index.php. The issue allows remote authenticated users to hijack administrator authentication to perform admin-page actions such as deleting categories or groups, banning users, or deleting users. Root cause details and explici...
CVE-2009-2388
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-2342
Cross-site scripting XSS vulnerability in admin.php aka the login page in Content Management Made Easy CMME before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field...
Sql injection
SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter...
CVE-2009-2018
SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter...
Sql injection
Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via 1 the uNev parameter aka the username field or 2 the uJelszo parameter aka the Password field...
CVE-2009-1818
SQL injection vulnerability in admin/adminmanager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an musername cookie in an add action...
CVE-2009-1816
SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter aka the username field. NOTE: some of these details are obtained from third party information...
CVE-2009-1813
Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via 1 the uNev parameter aka the username field or 2 the uJelszo parameter aka the Password field...
CVE-2009-1804
Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
MRCGIGUY ClickBank Directory 1.0.1 - Insecure Cookie Handling
--------------------------------------------------------------- --------------------------------------------------------------- ClickBank Directory Version 1.0.1 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...
Online Email Manager Insecure Cookie Handling Vulnerability
No description provided by source. Online Email Manager Insecure Cookie Handling Vulnerability Author: Hussin X Home : WwW.IQ-TY.CoM email: darkangelg85atYahooDoTcom script : http://www.esoftpro.com/webscriptsonlineemailmanager.phps DorK : Powered by Online Email Manager exploit:...
Online Email Manager - Insecure Cookie Handling
Online Email Manager - Insecure Cookie Handling Online Email Manager Insecure Cookie Handling Vulnerability Author: Hussin X Home : WwW.IQ-TY.CoM email: darkangelg85atYahooDoTcom script : http://www.esoftpro.com/webscriptsonlineemailmanager.phps DorK : Powered by Online Email Manager exploit:...
Aqua CMS - 'Username' SQL Injection
================================================================================ Found : halkfild Dork : "Powered By Aqua Cms" Vendor: http://www.aquacms.net/ Advisory URL: http://crackfor.me/bugtraq/aquacms.v1.1.txt Visit : crackfor.me, forum.antichat.ru, raz0r.name Mail : bugtraqd0gcrackfor.me...
Webstore Creator 5.0 SQL Injection
--------------------------------------------------------- Portal Name: Webstore Creator Version: 5.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...
Shop Creator 4.0 SQL Injection
--------------------------------------------------------- Portal Name: Shop Creator Version: 4.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...
SAS Hotel Management System Authentication Bypass
--------------------------------------------------------- Portal Name: SAS Hotel Management System Author : PouyaServer , [email protected] mailto:[email protected] Vulnerability : Auth Bypass SQL Injection Vulnerability --------------------------------------------------------- Auth...
gr blog 1.1.4 - Arbitrary File Upload / Authentication Bypass
GR Blog v1.1.4 Upload/Bypass Multiple Remote Vulnerabilities Author: Jose Luis Gongora Fernandez a.k.a JosS Web: http://hack0wn.com/ // TEST ON VERSION GR Blog v1.1.4, in my localhost Download : http://sirini.net/grboard/board.php?id=grblog&articleNo=43 // + Remote File Upload:...
Phormer PhotoGallery 3.3.1 Insecure Cookie
Exploit Code : Phormer PhotoGallery 3.3.1 Insecure Cookie Handling Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc Mail : [email protected] script : http://p.horm.org/er DorK:"This PhotoGallery is powered by Phormer" exploiT: go to admin page www.site.com/admin.php exploiT...