2783 matches found
CVE-2006-4772
HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc...
CVE-2006-4772
HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc...
hotplugCMSconfig.txt
Hello HotPlug CMS Config File Include Vulnerability Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] After Script Url Add includes/class/config.inc And you will download the config file ,, so that you will be able to connect by remote connect...
CVE-2006-4653
1 Amazing Little Poll and 2 Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lpsettings file lpsettings.inc or lpsettings.php...
CVE-2006-4653
1 Amazing Little Poll and 2 Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lpsettings file lpsettings.inc or lpsettings.php...
CVE-2006-4653
The CVE-2006-4653 entry concerns two WordPress-like poll components, “Amazing Little Poll” and “Amazing Little Picture Poll,” which expose the admin password by serving the lp_settings files (lp_settings.inc or lp_settings.php) from the web root due to insufficient access control. The vulnerabili...
mojoxss.txt
SOFTWARE: ========= MojoScripts' mojoGallery All version DESCRIPTION: ============ dork: "Powered by mojoGallery" add to last path /admin.cgi , admin and password input alert"lol" or all html tags ===================== mail: [email protected] , [email protected] web: www.ayyildiz.org special...
Spidey Blog Script 1.5 - 'proje_goster.asp' SQL Injection (1)
Spidey Blog Script == 1.5 tr SQL Injection Vulnerability Author : ASIANEAGLE Site : www.asianeagle.org Contact: [email protected] Risk : High Download Link Of Spidey Blog : http://www.aspindir.com/Kategoriler/ASP/bloglar Exploit; Admin Nick; http://SITE/Spidey Blog...
CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) - SQL Injection
CLUB-Nuke XP 2.0 LCID 2048 Turkish Version - SQL Injection CLUB-Nuke XP v2.0 LCID 2048 Turkish Version SQL Injection Vulnerability Risk : High Credit : ASIANEAGLE Contact: [email protected] Web : www.asianeagle.org Download Link :...
CVE-2006-4001
Login.pm in Barracuda Spam Firewall BSF 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password...
CVE-2006-4001
CVE-2006-4001 concerns Barracuda Spam Firewall (BSF): affected firmware versions 3.3.01.001–3.3.03.053 contain a hard-coded password for the guest account, enabling remote attackers to read sensitive data such as e-mail logs and potentially e-mail contents and the admin password. Related connecte...
Invision Power Board 2.1 < 2.1.6 - SQL Injection (1)
!/usr/bin/perl Invision Power Board v2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2.1. 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack; $fleft=$mw-Frame-pack -side = 'left...
PT-2006-4098 · Upb · Ultimate Php Board
Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB versions 1.9.6 and earlier Description: The issue concerns a default administrator login account and password included in the installation of the software, allowing remote attackers to gain privileges. Recommendations:...
aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit
No description provided by source. !-- Title : aspWebLinks 2.0 Remote Admin Pass Change Exploit and links.asp SQL Injection Author : ajann Dork : aspWebLinks 2.0 SQL INJECTION:...
aspWebLinks 2.0 - SQL Injection / Admin Pass Change
AspWebLink 2.0 Remote Admin Pass Change Exploit Administrative Password:Number of Days New:Number of Visits Hot:Links Per Page:td wid...
CVE-2006-2546
A recommended admin password reset mechanism for BEA WebLogic Server 8.1, when followed before October 10, 2005, causes the administrator password to be stored in cleartext in the domain directory, which could allow attackers to gain privileges...
Zix Forum <= 1.12 (layid) SQL Injection Vulnerability
Zix Forum = 1.12 layid SQL Injection Vulnerability Vulnerability: -------------------- SQLInjection: Input passed to the "layid" parameter in 'settings.asp' not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code...
Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit
No description provided by source. !/usr/bin/perl -w Remotely change the administrator password or password hash of Symantec Scan Engine. Author: Marc Bevand of Rapid7 marcbevandatrapid7.com Copyright 2006 Rapid7, LLC. All rights reserved. Redistribution and use in source and binary forms, with o...
[Full-disclosure] Sql Injection in BookMark4u
site: http://bookmark4u.sourceforge.net/ Hello i found a vulnerability in bookmark4u that u can use to make sql injections... the following PoC changes the admin password: code form action='http://bookmark4u.sourceforge.net/v2.0.0/admin/config.php' method='post' trtd align='center' input...
Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit
Exploit for cgi platform in category remote exploits ================================================================= Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit ================================================================= !/usr/bin/perl -w Remotely change the...