448 matches found
CVE-2007-2775
CVE-2007-2775 affects AlstraSoft Live Support 1.21. The issue arises when the application issues a redirect but does not exit after missing administrative credentials, enabling a remote attacker to obtain administrative access via a direct request to admin/managesettings.php. The NVD description ...
livesup-admin.txt
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of LiveSupport Example: php ".$argv0." localhost /LiveSupport/ "; die; errorreporting0;...
AlstraSoft E-Friends <= 4.21 Admin Session Retrieve Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft E-Friends = 4.21 Admin Session Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php...
tsp-admin.txt
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Host Path ID password Host: target server ip/hostname Path: path of template ID: A Valid Admin ID usally 1 works for the 'admin' nickname password: The PWD you want ...
AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php...
AlstraSoft Template Seller Pro <= 3.25 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ==================================================================== AlstraSoft Template Seller Pro = 3.25 Remote Code Execution Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=...
AlstraSoft E-Friends <= 4.21 Admin Session Retrieve Exploit
Exploit for unknown platform in category web applications =========================================================== AlstraSoft E-Friends = 4.21 Admin Session Retrieve Exploit =========================================================== !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft...
Alstrasoft Template Seller Pro 3.25 - Admin Password Change
Alstrasoft Template Seller Pro 3.25 - Admin Password Change !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Host Path ID password Host: target server ip/hostname Path: path of template ID: A Valid Admin ID usally ...
Alstrasoft e-Friends 4.21 - Admin Session Retrieve
Alstrasoft e-Friends 4.21 - Admin Session Retrieve !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of template Example: php ".$argv0." localhost /efriend/"; die...
AlstraSoft Template Seller Pro <= 3.25 Admin Password Change Exploit
Exploit for unknown platform in category web applications ==================================================================== AlstraSoft Template Seller Pro = 3.25 Admin Password Change Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=...
AlstraSoft Template Seller Pro <= 3.25 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft Template Seller Pro = 3.25 Remote Code Execution Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage:...
Alstrasoft Live Support 1.21 - Admin Credential Retrieve
Alstrasoft Live Support 1.21 - Admin Credential Retrieve !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of LiveSupport Example: php ".$argv0." localhost...
AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit
Exploit for unknown platform in category web applications =============================================================== AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit =============================================================== !/usr/bin/php -q -d shortopentag=on ? echo "...
Alstrasoft Live Support 1.21 - Admin Credential Retrieve
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of LiveSupport Example: php ".$argv0." localhost /LiveSupport/ "; die; errorreporting0;...
Alstrasoft e-Friends 4.21 - Admin Session Retrieve
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of template Example: php ".$argv0." localhost /efriend/"; die; errorreporting0; iniset"maxexecutiontime",0;...
Alstrasoft Template Seller Pro 3.25 - Remote Code Execution
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Host Path CMD Host: target server ip/hostname Path: path of template CMD: A Shell Command Example: php ".$argv0." localhost /template/ cat /etc/passwd"; die;...
CVE-2007-2018
SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
CVE-2007-2017
siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request...
