3346 matches found
GR Note 0.94 beta (Auth Bypass) Remote Database Backup Vulnerability
No description provided by source. GR Note v0.94 beta Remote Database Disclosure Vulnerability Author: Jose Luis Gongora Fernandez a.k.a JosS sys-projectathotmail.com Web: http://hack0wn.com/ // TEST ON VERSION GR Note v0.94 beta, in my localhost Download :...
GR Note 0.94 Beta - (Authentication Bypass) Remote Database Backup
GR Note v0.94 beta Remote Database Disclosure Vulnerability Author: Jose Luis Gongora Fernandez a.k.a JosS Web: http://hack0wn.com/ // TEST ON VERSION GR Note v0.94 beta, in my localhost Download : http://sirini.net/grboard/board.php?id=grnote&articleNo=5 // !xpl: /admin/admin.backup.php h0...
GR Note 0.94 Beta - (Authentication Bypass) Remote Database Backup
GR Note 0.94 Beta - Authentication Bypass Remote Database Backup GR Note v0.94 beta Remote Database Disclosure Vulnerability Author: Jose Luis Gongora Fernandez a.k.a JosS Web: http://hack0wn.com/ // TEST ON VERSION GR Note v0.94 beta, in my localhost Download :...
CVE-2009-0394
The CVE-2009-0394 entry describes a SQL injection vulnerability in the login.php of Pre Lecture Exercises (PLEs) CMS 1.0 beta 4.2 . An attacker can exploit the vulnerability by supplying a crafted value to the school parameter , potentially allowing remote execution of arbitrary SQL commands. The...
CVE-2009-0394
SQL injection vulnerability in login.php in Pre Lecture Exercises PLEs CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter...
PLE CMS 1.0 Beta 4.2 SQL Injection
--+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ". "\n+ Ex. : php xpl.php localhost /PLECMS root...
PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== PLE CMS 1.0 beta 4.2 login.php school Blind SQL Injection Exploit ===================================================================...
PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit
No description provided by source. --+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ?php function query $user, $pos, $chr $quer...
Stable, Beta update: Yahoo! Mail and Security Fixes
Google Chrome's Beta and Stable channels have been updated to 1.0.154.46. Note, we won't have a different release for the Beta channel until we have something Beta-worthy come out of the Dev channel in February. This release fixes issues with two popular webmail providers: Sending mail from Yahoo...
CVE-2008-5945
Nukeviet 2.0 Beta allows remote attackers to bypass authentication and gain administrative access by setting the admf cookie to 1. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Remote file inclusion
PHP remote file inclusion vulnerability in include/classyapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the cfgIncludeDirectory parameter...
CVE-2008-5947
CVE-2008-5947 : In YapBB 1.2.Beta 2, a PHP remote file inclusion flaw exists in include/class_yapbbcooker.php triggered by a URL in the cfgIncludeDirectory parameter. The vulnerability allows remote attackers to cause arbitrary PHP code execution. The CVSS metrics indicate Network access, require...
CVE-2008-5901
CVE-2008-5901 affects iyzi Forum 1.0 beta 3, where sensitive information is stored under the web root with insufficient access control. A direct request to the file db/iyziforum.mdb can allow remote attackers to download the database, exposing passwords. The CVSS data (NVD) characterizes the impa...
BKWorks ProPHP 0.50b1 - Authentication Bypass
BKWorks ProPHP 0.50 Beta 1 Auth Bypass SQL Injection + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Dork : Powered by BKWorks ProPHP Version 0.50 Beta 1 + SQL Injection Login Bypass - Login as : Username : admin ' or ' 1=1 Password : anything or nothing And you will be logged...
CVE-2008-5791
Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 aka 1.1.0.1 have unknown impact and attack vectors, related to the 1 bankwire module, 2 cheque module, and other components...
Google Chrome Parameter Injection
click me...
Google Chrome Browser (ChromeHTML://) Remote Parameter Injection
No description provided by source. !-- Google Chrome Browser ChromeHTML:// remote parameter injection POC by Nine:Situations:Group::bellick&strawdog Site: http://retrogod.altervista.org/ tested against: Internet Explorer 8 beta 2, Google Chrome 1.0.154.36, Microsoft Windows XP SP3 List of command...
Joomla Component Ice Gallery 0.5b2 (catid) Blind SQL Injection Vuln
No description provided by source. Joomla Component comicecatid Blind SQL-injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. Vulnerability : Blind SQL injection Google Dork : inurl:comice "catid"...
Joomla! Component Ice Gallery 0.5b2 - catid Blind SQL Injection
Joomla! Component Ice Gallery 0.5b2 - catid Blind SQL Injection Joomla Component comicecatid Blind SQL-injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. Vulnerability : Blind SQL injection Google Dork : inurl:comice "catid"...