CVE-2003-1540

CVE-2003-1540 concerns WF-Chat 1.0 Beta, where sensitive information is stored under the web root with insufficient access control. The vulnerability allows remote attackers to obtain authentication-related data by directly requesting the files “!pwds.txt” and “!nicks.txt.” The available sources ...

Affiliate Market 0.1 Beta - Language Local File Inclusion

Affiliate Market 0.1 Beta - Language Local File Inclusion Affiliate Market Ver.0.1 BETA language Local File Include Vulnerability http://kent.dl.sourceforge.net/sourceforge/affmarket/affmarket.30.03.07.zip /user/header.php?language=../../../../../../../../../../../etc/passwd I'm tryagi ..^|-...

affiliate-lfi.txt

Affiliate Market Ver.0.1 BETA language Local File Include Vulnerability http://kent.dl.sourceforge.net/sourceforge/affmarket/affmarket.30.03.07.zip /user/header.php?language=../../../../../../../../../../../etc/passwd I'm tryagi ..^|-...

CVE-2008-0650

Vulnerability summary (CVE-2008-0650): In Simple OS CMS 0.1c beta, the login.php username field is susceptible to SQL injection, enabling remote attackers to execute arbitrary SQL commands. This affects the login process and can impact confidentiality, integrity, and availability (as per NVD metr...

Mambo Component 'com_akogallery' 2.5b - SQL Injection

joomla SQL Injectioncomakogallery AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comakogallery" EXPLOIT :...

Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability

Syhunt: HFS HTTP File Server Username Spoofing and Log Forging/Injection Vulnerability Advisory-ID: 200801163 Discovery Date: 1.16.2008 Release Date: 1.23.2008 Affected Applications: HFS 1.5g to and including 2.3Beta Build 174; and possibly HFS version 1.5f Non-Affected Applications: HFS 1.5e and...

Vulnerabilities in Relay

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection и Cross-Site Scripting уязвимостях в движке Relay. SQL Injection: http://site/relay/relay.php?relay=getFile&fileid=-120or20id=1151513788 http://site/relay/relay.php?relay=getFile&fileid=115151378820and20substringversion,1,1=3 XSS...

Deserialization of untrusted data

actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action...

CVE-2008-0142

CVE-2008-0142 affects WebPortal CMS 0.6-beta, with multiple SQL injection vulnerabilities. The issue allows remote attackers to execute arbitrary SQL commands via the user_name parameter to actions.php and other vectors. Root cause: input unsafely concatenated into SQL queries. Impact: arbitrary ...

PT-2008-1794 · Webportal · Webportal Cms

Name of the Vulnerable Software and Affected Versions: WebPortal CMS version 0.6-beta Description: The issue allows remote attackers to obtain access to any account via a lostpass action because the actions.php file in WebPortal CMS generates predictable passwords containing only the time of day...

WebPortal CMS 0.6-beta Remote Password Change Exploit

No description provided by source. !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ ...

webportalcms-passwd.txt

!/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date:...

WebPortal CMS 0.6-beta - Remote Password Change

!/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date:...

CVE-2007-6587

SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6587

Plogger 1.0 Beta 3.0 is affected by a SQL injection in plog-rss.php via the id parameter. The issue allows remote attackers to manipulate the database and potentially read/modify data. The vulnerability is confirmed across CVE-2007-6587 entries in NVD/NIST and corroborated by Nessus plugin covera...

CVE-2007-6587

SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

blakord-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Blakord Portal = 0 Exploit2: http://localhost/path/any module?id=1 and exists select from TABLE Example: http://localhost/path/any module?id=1 AND SELECT Count FROM users = 0 Example2:...

Blakord Portal <= Beta 1.3.A (all modules) Blind Sql Injection

Blakord Portal = Beta 1.3.A all modules Blind Sql Injection. + Info: Software: Blakord Portal HomePage: http://www.cdv3k.com Exploit: Blind Sql Injection High Where: All Modules Bug Found By: JosS / Jose Luis Gуngora Fernбndez Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com...

Blakord Portal <= Beta 1.3.A (all modules) SQL Injection Vulnerability

No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Blakord Portal = Beta 1.3.A all modules Blind Sql Injection +==-- --==+===================================================================================+==-- +...

Blakord Portal <= Beta 1.3.A (all modules) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Blakord Portal = 0 Exploit2: http://localhost/path/any module?id=1 and exists select from TABLE Example: http://localhost/path/any module?id=1 AND SELECT Count FROM use...