AuthPhp 1.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Name : AuthPhp 1.0 Download : http://frankmancuso.ca/downloads/authphp/authphp-stable-1.0.zip Vulnerability : Auth Bypass Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/login.php Code...

Mynews 0_10 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Name : Mynews 010 Download : http://prdownloads.sourceforge.net/mynews/mynewsbeta010.zip?download Vulnerability : Auth Bypass Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/login.php Code...

Design/Logic Flaw

Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an "auth vulnerability."...

CVE-2009-0492

Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an "auth vulnerability."...

CVE-2009-0492

Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an "auth vulnerability."...

CVE-2009-0492

Technical details, affected versions, impact, and remediation for CVE-2009-0492 are not provided in the supplied documents; no concrete exploit information is present. Monitor for updates.

AuthPhp 1.0 SQL Injection

0x01 Informations: Name : AuthPhp 1.0 Download : http://frankmancuso.ca/downloads/authphp/authphp-stable-1.0.zip Vulnerability : Auth Bypass Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/login.php Code $username = $POST'username'; $passwd =...

AuthPhp 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== AuthPhp 1.0 Auth Bypass SQL Injection Vulnerability ===================================================== 0x01 Informations: Name : AuthPhp 1.0 Download :...

BlueBird Pre-Release SQL Injection

0x01 Informations: Name : BlueBird Pre-Release Download : http://downloads.sourceforge.net/bluebird/bluebirdpre.zip Vulnerability : Auth Bypass Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/login.php Code if $request == "POST" $username =...

BlueBird Pre-Release (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== BlueBird Pre-Release Auth Bypass SQL Injection Vulnerability ============================================================== 0x01 Informations: Name : BlueBird Pre-Release...

Mynews 0_10 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Name : Mynews 010 Download : http://prdownloads.sourceforge.net/mynews/mynewsbeta010.zip?download Vulnerability : Auth Bypass Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/login.php Code...

ZeroBoard4 pl8 (07.12.17) Multiple Remote Vulnerabilities

No description provided by source. ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL...

SilverNews 2.04 (Auth Bypass/LFI/RCE) Multiple Vulnerabilities

No description provided by source. 0x01 Informations: Name : SilverNews 2.04 Download : http://www.silver-scripts.de/scripts.php?script=SilverNews&l=en Vulnerability : Auth Bypass\LFI\RCE Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is...

Zeroboard4 pl8 (07.12.17) - Multiple Vulnerabilities

Zeroboard4 pl8 07.12.17 - Multiple Vulnerabilities ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that suppor...

SilverNews 2.04 Bypass / LFI / Code Execution

0x01 Informations: Name : SilverNews 2.04 Download : http://www.silver-scripts.de/scripts.php?script=SilverNews&l=en Vulnerability : Auth Bypass\LFI\RCE Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/admin.php Code // Get the user informatio...

ZeroBoard4 pl8 (07.12.17) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= ZeroBoard4 pl8 07.12.17 Multiple Remote Vulnerabilities ========================================================= / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used...

Openfiler 2.3 (Auth Bypass) Remote Password Change Exploit

No description provided by source. Exploit code PoC for OpenFiler 2.3 current by just a nonroot user http://nonroot.blogspot.com/ import urllib,sys,re host example: https://192.168.20.5:446/ host=rawinput"OpenFiler system include http and /: " Super admin user user='openfiler' What pass do you...

GR Note 0.94 beta (Auth Bypass) Remote Database Backup Vulnerability

Exploit for unknown platform in category web applications ==================================================================== GR Note 0.94 beta Auth Bypass Remote Database Backup Vulnerability ==================================================================== GR Note v0.94 beta Remote Database...

Online Grades 3.2.4 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Script : Online Grades 3.2.4 Download : http://www.onlinegrades.org Vulnerability : Auth Bypass - Php Info Disclosure Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: /parents/login.php $username = $POST'uname...

4Site CMS <= 2.6 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules "Pages" module:...