Design/Logic Flaw

install.php in Web Reference Database aka refbase through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381...

CVE-2015-6008

install.php in Web Reference Database aka refbase through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381...

CVE-2015-6008

CVE-2015-6008 affects Web Reference Database (refbase) install.php up to version 0.9.6. A remote attacker can execute arbitrary PHP code by manipulating the adminPassword parameter, enabling remote code execution. This is a confirmed vulnerability entry with corroborating references indicating a ...

CVE-2015-6008: Improper Neutralization of Special Elements used in an OS Command

install.php in Web Reference Database aka refbase through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381...

PT-2015-7111

Name of the Vulnerable Software and Affected Versions Web Reference Database aka refbase versions prior to 0.9.7 Description The issue allows remote attackers to execute arbitrary commands via the adminPassword parameter. Recommendations For versions prior to 0.9.7, update to version 0.9.7 or lat...

@lex Guestbook <= 4.0.2 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/php ?php // | | header @lex Guestbook = 4.0.2 Remote Command Execution Exploit | header ======================================================== | status Retrieving the administrator password | sploit AdminUsername::root | sploit AdminPassword::toor |...

Sawmill 6.2.x AdminPassword Insecure Default Permissions Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4077/info Sawmill is commercial log analysis software. It runs on most Unix and Linux variants, Microsoft Windows NT/2000 operating systems and MacOS. Sawmill creates the file AdminPassword with insecure default permissio...

e-webtech (page.asp) SQL Injection Vulnerability

Exploit for asp platform in category web applications ================================================ e-webtech page.asp SQL Injection Vulnerability ================================================ -------------------------------------------------------------------------------------------...

e-webtech - new.asp?id SQL Injection

e-webtech - new.asp?id SQL Injection new.asp?id= SQL Injection Vulnerability Home: http://www.dz4all.com/cc | http://www.h4ckforu.com/vb Risk: high Title: new.asp?id= SQL Injection Vulnerability Dork: "Powerd by www.e-webtech.com" Discovred by: protocol From : algeria Contact : [email protected] Greet ...

e-webtech - 'new.asp?id=' SQL Injection

new.asp?id= SQL Injection Vulnerability Home: http://www.dz4all.com/cc | http://www.h4ckforu.com/vb Risk: high Title: new.asp?id= SQL Injection Vulnerability Dork: "Powerd by www.e-webtech.com" Discovred by: protocol From : algeria Contact : [email protected] Greet to : All Members of...

e-webtech (new.asp) SQL Injection Vulnerability

Exploit for asp platform in category web applications =================================================== e-webtech new.asp?id= SQL Injection Vulnerability =================================================== new.asp?id= SQL Injection Vulnerability Home: http://www.dz4all.com/cc |...

phpArcadeScript 4 - cat SQL Injection

phpArcadeScript 4 - cat SQL Injection || | | PHP Arcade Script v4.0 cat Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

E-Store Kit-1 2 PayPal Edition - pid SQL Injection

E-Store Kit-1 2 PayPal Edition - pid SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability E-Store Kit-1 viewdetails.php pid E-Store Kit-2 viewdetails.php pid E-Store Kit-1 Pro PayPal Edition viewdetails.php pid E-Store Kit-2 PayPal Edition viewdetails.php pid www.magicscripts.co...

guest402.txt

!/usr/bin/php @lex Guestbook ======================================================== | status Retrieving the administrator password | sploit AdminUsername::root | sploit AdminPassword::toor | status Trying to get logged in | sploit Done | status Trying to add a skin | sploit Done | status Writin...

@lex Guestbook 4.0.2 - Remote Command Execution

@lex Guestbook 4.0.2 - Remote Command Execution !/usr/bin/php @lex Guestbook ======================================================== | status Retrieving the administrator password | sploit AdminUsername::root | sploit AdminPassword::toor | status Trying to get logged in | sploit Done | status...

CVE-2002-0265

Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file...

CVE-2002-0265: Undefined Security Weakness

Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file...

Sawmill 6.2.x - Admin Password Insecure Default Permissions

Sawmill 6.2.x - Admin Password Insecure Default Permissions source: https://www.securityfocus.com/bid/4077/info Sawmill is commercial log analysis software. It runs on most Unix and Linux variants, Microsoft Windows NT/2000 operating systems and MacOS. Sawmill creates the file AdminPassword with...