2784 matches found
CVE-2007-4157
PHPBlogger stores sensitive information under the web root with insufficient access control, allowing remote retrieval of data/pref.db. The retrieved database contains the admin password hash, which can be used to craft authentication cookies and gain administrative access without the cleartext p...
CVE-2007-4157
PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing...
Hunkaray Okul Portali v1.1 (tr) Sql injection Vuln
///////////Yollubunlar.Org/////////// Title : Hunkaray Okul Portali v1.1 tr Sql injection Vuln Author : Yollubunlar Orginal: http://yollubunlar.org/hunkaray-okul-portali-v11-tr-sql-injection-vuln-44.html Web Page :www.yollubunlar.orgg Contact : [email protected] Acik : in duyuruoku.asp...
PHPBlogger cookie privilege escalation
PHPBlogger is a simple tool to help the creation of web blogs... Encrypted admin password and other preferences are stored on /data/pref.db You can find lots of them exposed with google search: pref password= filetype:db = -------------------------------------------- The admin panel is acessible...
PHPBlogger is a simple tool to help the creation of web blogs... Encrypted admin password and other preferences are stored on /data/pref.db You can find lots of them exposed with google search: pref password= filetype:db = -------------------------------------------- The admin panel is acessible...
QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability
No description provided by source. author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password:...
quickestore-sql.txt
author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1 union...
QuickEStore 8.2 - 'insertorder.cfm' SQL Injection
author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1 union...
QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= QuickEStore = 8.2 insertorder.cfm Remote SQL Injection Vulnerability ======================================================================= web application:QuickEStor...
QuickEStore 8.2 - insertorder.cfm SQL Injection
QuickEStore 8.2 - insertorder.cfm SQL Injection author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password:...
realtor-sql.txt
--==+================================================================================+==-- --==+ Realtor 747 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: http://www.it747.com/realtor747...
Traffic Stats - 'referralUrl.php?offset' SQL Injection
--==+================================================================================+==-- --==+ Traffic Stats SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:" If you...
CVE-2007-3788
The eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document, which might allow context-dependent attackers to obtain sensitive information by reading this document...
Design/Logic Flaw
The eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document, which might allow context-dependent attackers to obtain sensitive information by reading this document...
CVE-2007-3788
The eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document, which might allow context-dependent attackers to obtain sensitive information by reading this document...
CVE-2007-3788
The vulnerability CVE-2007-3788 affects the eSoft InstaGate EX2 UTM device, where the admin password is stored within the settings HTML document. This exposes a risk that an attacker who can read that document may obtain sensitive information, potentially compromising confidentiality and integrit...
Realtor 747 (index.php categoryid) Remote SQL Injection Vulnerbility
No description provided by source. --==+================================================================================+==-- --==+ Realtor 747 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE...
Calyptix Security Advisory CX-2007-05 - eSoft InstaGate EX2 Cross-Site Request Forgery Attack
Calyptix Security Advisory CX-2007-05 eSoft InstaGate EX2 Cross-Site Request Forgery Attack Date: 07/11/2007 http://www.calyptix.com/ http://labs.calyptix.com/CX-2007-05.php http://labs.calyptix.com/CX-2007-05.txt Overview Multiple versions of eSoft's InstaGate EX2 UTM device are vulnerable to...
Realtor 747 (index.php categoryid) Remote SQL Injection Vulnerbility
Exploit for unknown platform in category web applications ==================================================================== Realtor 747 index.php categoryid Remote SQL Injection Vulnerbility ====================================================================...
Realtor 747 - index.php?categoryId SQL Injection
Realtor 747 - index.php?categoryId SQL Injection --==+================================================================================+==-- --==+ Realtor 747 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...