Killmonster <= 2.1 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Killmonster Type Username Here: Type Password Here: authenticate.php $isadmin=$POST'isadmin'; $password=$POST'password'; $password=md5$password; $query = "select from kmadmins...

Sql injection

SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL commands via the username parameter, related to login.php. NOTE: some of these details are obtained from third party information...

CVE-2008-7071

SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL commands via the username parameter, related to login.php. NOTE: some of these details are obtained from third party information...

CVE-2008-7071

CVE-2008-7071 is a SQL injection vulnerability in Chipmunk Topsites’ authenticate.php. The flaw allows remote attackers to execute arbitrary SQL commands via the username parameter (related to login.php). The public records here note a CVSS v2 base score of 7.5 (High) with network access and no a...

CVE-2008-7071

SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL commands via the username parameter, related to login.php. NOTE: some of these details are obtained from third party information...

CVE-2008-7071: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL commands via the username parameter, related to login.php. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-0403: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

Chipmunk Blog Add Admin Exploit

0x01 Informations: Script : Chipmunk Blog Download : http://www.chipmunk-scripts.com/blog/blog.zip Vulnerability : Add Admin Exploit\Auth Bypass Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: \admin\reguser.php \admin\authenticate.php if isset$POST'submit' //...

Chipmunk Blog - (Authentication Bypass) Add Admin

Chipmunk Blog - Authentication Bypass Add Admin 0x01 Informations: Script : Chipmunk Blog Download : http://www.chipmunk-scripts.com/blog/blog.zip Vulnerability : Add Admin Exploit\Auth Bypass Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: \admin\reguser.php...

Sql injection

SQL injection vulnerability in Stash 1.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 username parameter to admin/library/authenticate.php and the 2 download parameter to downloadmp3.php. NOTE: some of these details are obtained from thir...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHP JackKnife PHPJK allow remote attackers to inject arbitrary web script or HTML via 1 the sUName parameter to UserArea/Authenticate.php, 2 the sAccountUnq parameter to UserArea/NewAccounts/index.php, or the 3 iCategoryUnq, 4 iDBLoc, 5...

CVE-2007-3001

Multiple cross-site scripting XSS vulnerabilities in PHP JackKnife PHPJK allow remote attackers to inject arbitrary web script or HTML via 1 the sUName parameter to UserArea/Authenticate.php, 2 the sAccountUnq parameter to UserArea/NewAccounts/index.php, or the 3 iCategoryUnq, 4 iDBLoc, 5...

Sql injection

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2007-2305

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2007-2305

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2007-2305

The CVE-2007-2305 entry concerns multiple SQL injection flaws in the Quick and Dirty Blog (QDBlog) 0.4 (and possibly earlier) within the authenticated path. Specifically, the vulnerability resides in authenticate.php, where the (1) username and (2) password parameters can be manipulated to execut...

CVE-2007-2305: Undefined Security Weakness

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2006-6763: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book KISGB allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathtothemes parameter in a authenticate.php, and the 2 defaultpathforthemes parameter in b admin.php and c upconfig.php...

CVE-2006-6764: Undefined Security Weakness

PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book KISGB, when executing PHP through CGI, allows remote attackers to execute arbitrary PHP code via a URL in the defaultpathtothemes parameter...