3346 matches found
CVE-2008-0794
The CVE-2008-0794 entry concerns Affiliate Market 0.1 BETA, with a directory traversal vulnerability in user/header.php triggered by a .. in the language parameter. This allows a remote attacker to include and execute arbitrary local files. Documentation confirms affected component and root cause...
Affiliate Market Ver.0.1 BETA XSS / SQL Injection Exploit
No description provided by source. !/usr/bin/perl Affiliate Market Ver.0.1 BETA Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...
affiliate-sqlxss.txt
!/usr/bin/perl Affiliate Market Ver.0.1 BETA Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...
[SECURITY] Fedora 8 Update: Miro-1.1-3.fc8
Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...
[SECURITY] Fedora 7 Update: Miro-1.1-3.fc7
Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...
CVE-2003-1540
WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to 1 !pwds.txt and 2 !nicks.txt...
CVE-2003-1540
CVE-2003-1540 concerns WF-Chat 1.0 Beta, where sensitive information is stored under the web root with insufficient access control. The vulnerability allows remote attackers to obtain authentication-related data by directly requesting the files “!pwds.txt” and “!nicks.txt.” The available sources ...
Affiliate Market 0.1 Beta - Language Local File Inclusion
Affiliate Market 0.1 Beta - Language Local File Inclusion Affiliate Market Ver.0.1 BETA language Local File Include Vulnerability http://kent.dl.sourceforge.net/sourceforge/affmarket/affmarket.30.03.07.zip /user/header.php?language=../../../../../../../../../../../etc/passwd I'm tryagi ..^|-...
affiliate-lfi.txt
Affiliate Market Ver.0.1 BETA language Local File Include Vulnerability http://kent.dl.sourceforge.net/sourceforge/affmarket/affmarket.30.03.07.zip /user/header.php?language=../../../../../../../../../../../etc/passwd I'm tryagi ..^|-...
CVE-2008-0650
Vulnerability summary (CVE-2008-0650): In Simple OS CMS 0.1c beta, the login.php username field is susceptible to SQL injection, enabling remote attackers to execute arbitrary SQL commands. This affects the login process and can impact confidentiality, integrity, and availability (as per NVD metr...
Mambo Component 'com_akogallery' 2.5b - SQL Injection
joomla SQL Injectioncomakogallery AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comakogallery" EXPLOIT :...
Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability
Syhunt: HFS HTTP File Server Username Spoofing and Log Forging/Injection Vulnerability Advisory-ID: 200801163 Discovery Date: 1.16.2008 Release Date: 1.23.2008 Affected Applications: HFS 1.5g to and including 2.3Beta Build 174; and possibly HFS version 1.5f Non-Affected Applications: HFS 1.5e and...
Vulnerabilities in Relay
Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection и Cross-Site Scripting уязвимостях в движке Relay. SQL Injection: http://site/relay/relay.php?relay=getFile&fileid=-120or20id=1151513788 http://site/relay/relay.php?relay=getFile&fileid=115151378820and20substringversion,1,1=3 XSS...
Deserialization of untrusted data
actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action...
CVE-2008-0142
CVE-2008-0142 affects WebPortal CMS 0.6-beta, with multiple SQL injection vulnerabilities. The issue allows remote attackers to execute arbitrary SQL commands via the user_name parameter to actions.php and other vectors. Root cause: input unsafely concatenated into SQL queries. Impact: arbitrary ...
PT-2008-1794 · Webportal · Webportal Cms
Name of the Vulnerable Software and Affected Versions: WebPortal CMS version 0.6-beta Description: The issue allows remote attackers to obtain access to any account via a lostpass action because the actions.php file in WebPortal CMS generates predictable passwords containing only the time of day...
WebPortal CMS 0.6-beta Remote Password Change Exploit
No description provided by source. !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ ...
webportalcms-passwd.txt
!/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date:...
WebPortal CMS 0.6-beta - Remote Password Change
!/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date:...
