d.net CMS - Arbitrary Reinstall/Blind SQL Injection

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ - - + / / / / / / + - / / / / /// / / / /// / / - + / // / // / / / , \n". "+ Ex. : php xpl.php localhost /dnetCMS/\n". "+ Greetz : cristina, puccio they kept me company when I coded this stuff :D\n". "\n"; function hex $string $i=0;...

FretsWeb 1.2 SQL Injection

!/usr/bin/python || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://sourceforge.net/projects/fretsweb/ | |--DOWNLOAD: http://sourceforge.net...

(Post Form login var 'username') BLIND SQLi exploit--Open Biller 0.1-->

!/usr/bin/perl ------------------------------------------------------------------------ Post Form login var 'username' BLIND SQLi exploit--Open Biller 0.1-- ------------------------------------------------------------------------ CMS INFORMATION: --WEB: http://sourceforge.net/projects/geekbill/...

CVE-2009-1771

index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, which allows remote attackers to create or modify admin accounts via the 1 usersfullname, 2 usersemail, 3 usersroleid, 4 usersusername, and 5 userspassword parameters...

TemaTres 1.0.3 Blind SQL Injection

!/usr/bin/perl --------------------------------------------------- BLIND SQL INJECTION EXPLOIT--TemaTres 1.0.3-- --------------------------------------------------- CMS INFORMATION: --WEB: http://www.r020.com.ar/tematres/ --DOWNLOAD: http://sourceforge.net/projects/tematres/ --DEMO:...

DeluxeBB <= 1.3 (qorder) Remote SQL Injection Vulnerability

No description provided by source. Author: girex Homepage: girex.altervista.org Date: 18/03/2009 CMS: DeluxeBB 1.3 and prior site: deluxebb.com NOTE: - Works regardless of php.ini settings - This SQL injection will shows you username and md5 of ALL registered users of the site. - This PoC was...

w3blabor CMS 3.0.5 Upload / LFI Vulnerabilities

!/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2oo8 |...

Creator CMS 5.0 - sideid SQL Injection

Creator CMS 5.0 - sideid SQL Injection Exploit : Creator CMS 5.0 Remote SQL Injection Vulnerability Vendor : www.cmind.dk Founded By : ThE X-HaCkEr From X9 Team ThE X-HaCkEr & dr.9 Greetz To : tryag.cc & saudihack.com & hackteach.org all muslim Email : [email protected] Google D0rk :...

DSECRG-08-037.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008 Solution: YES Date of Public Advisory: 25.08.2008...

MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure

MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On...

Mambo 4.6.2 CMS - Session fixation Issue in backend Administration interface

==================================================================================== Team Intell Security Advisory TISA2007-04 ------------------------------------------------------------------------------------ Mambo 4.6.2 CMS - Session fixation Issue in backend Administration interface...

CVE-2006-4440

PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathShowProcessHandle parameter...

JAWS index.php gadget Parameter Traversal Arbitrary File Access

The remote web server is running JAWS, a content management system written in PHP. Input to the 'gadget' parameter of index.php is not properly sanitized. A remote attacker could exploit this to read potentially sensitive data from the system. This information could also be used to mount further...

Anyone can read all XOOPS private messages

www.phpsecure.org advisory. In french : http://www.phpsecure.org/?zone=pComment&d=101 By valdeux Publiacted on december, 13th 2002 As most part of PHP CMS, XOOPS allows users to send and receive Private Messages PMs, that are saved on the DataBase. We found how all messages are readable. And sure...