CVE-2008-5597

Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for db/cforum.mdb...

Web Wiz Guestbook 8.21 - Database Disclosure

Web Wiz Guestbook 8.21 - Database Disclosure ============= Web Wiz Guestbook v8.21 WWGguestbook.mdb Remote Database Disclosure Vulnerability auther : Cold z3ro, www.hackteach.org http://site.com/Path/database/WWGguestbook.mdb Dork : webwizguestbooklicense.asp ============= milw0rm.com 2008-12-16...

Web Wiz Guestbook 8.21 - Database Disclosure

============= Web Wiz Guestbook v8.21 WWGguestbook.mdb Remote Database Disclosure Vulnerability auther : Cold z3ro, www.hackteach.org http://site.com/Path/database/WWGguestbook.mdb Dork : webwizguestbooklicense.asp ============= milw0rm.com 2008-12-16...

Web Wiz Database Disclosure

============= Web Wiz Guestbook v8.21 WWGguestbook.mdb Remote Database Disclosure Vulnerability auther : Cold z3ro, www.hackteach.org http://site.com/Path/database/WWGguestbook.mdb Dork : webwizguestbooklicense.asp =============...

Liberum Help Desk 0.97.3 (SQL/DD) Remote Vulnerabilities

No description provided by source. Liberum Help Desk SQL/DD Multiple Remote Vulnerabilities author : Cold z3ro, www.hackteach.org Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem" ============== SQL Injection http://www.site.com/path/forgotpass.asp In uid insert SQL command's = SCMD == ' or...

Liberum Help Desk 0.97.3 - SQL Injection File Disclosure

Liberum Help Desk 0.97.3 - SQL Injection File Disclosure Liberum Help Desk SQL/DD Multiple Remote Vulnerabilities author : Cold z3ro, www.hackteach.org Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem" ============== SQL Injection http://www.site.com/path/forgotpass.asp In uid insert SQL...

Web Wiz Guestbook 8.21 (WWGguestbook.mdb) DD Vulnerability

No description provided by source. ============= Web Wiz Guestbook v8.21 WWGguestbook.mdb Remote Database Disclosure Vulnerability auther : Cold z3ro, www.hackteach.org http://site.com/Path/database/WWGguestbook.mdb Dork : webwizguestbooklicense.asp =============...

Forest Blog 1.3.2 - Remote Database Disclosure

Forest Blog 1.3.2 - Remote Database Disclosure ============= Forest Blog v1.3.2 blog.mdb Remote Database Disclosure Vulnerability auther : Cold z3ro, www.hackteach.org http://site.com/Path/blog.mdb Dork : Powered By: Forest Blog v1.3.2 ============= milw0rm.com 2008-12-15...

Forest Blog 1.3.2 (blog.mdb) Remote Database Disclosure Vulnerability

No description provided by source. ============= Forest Blog v1.3.2 blog.mdb Remote Database Disclosure Vulnerability auther : Cold z3ro, www.hackteach.org http://site.com/Path/blog.mdb Dork : Powered By: Forest Blog v1.3.2 ============= milw0rm.com 2008-12-15...

Forest Blog 1.3.2 - Remote Database Disclosure

============= Forest Blog v1.3.2 blog.mdb Remote Database Disclosure Vulnerability auther : Cold z3ro, www.hackteach.org http://site.com/Path/blog.mdb Dork : Powered By: Forest Blog v1.3.2 ============= milw0rm.com 2008-12-15...

Forest Blog Database Disclosure

============= Forest Blog v1.3.2 blog.mdb Remote Database Disclosure Vulnerability auther : Cold z3ro, www.hackteach.org http://site.com/Path/blog.mdb Dork : Powered By: Forest Blog v1.3.2 =============...

Cold BBS - Remote Database Disclosure

Database Disclosure Vulnerability script: Cold BBS download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7 www.site.com/path/db/cforum.mdb Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...

Cold BBS - Remote Database Disclosure

Cold BBS - Remote Database Disclosure Database Disclosure Vulnerability script: Cold BBS download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7 www.site.com/path/db/cforum.mdb Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...

Cold BBS (cforum.mdb) Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== Cold BBS cforum.mdb Remote Database Disclosure Vulnerability ============================================================== Database Disclosure Vulnerability script: Cold BBS...

Cold BBS (cforum.mdb) Remote Database Disclosure Vulnerability

No description provided by source. Database Disclosure Vulnerability script: Cold BBS download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7 www.site.com/path/db/cforum.mdb Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...

coldbbs-disclose.txt

Database Disclosure Vulnerability script: Cold BBS download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7 www.site.com/path/db/cforum.mdb Author: ahmadbady my mail: [email protected]...

PhotoPost vBGallery 2.4.2 Arbitrary File Upload Vulnerability

No description provided by source. vBulletin PhotoPost vBGallery v2.x Remote File Upload Found by : Cold z3ro e-mail : [email protected] Home page : www.Hack.ps ============================== exploit usage : http://localhost/Forum/$gallerypath/upload.php here the exploiter can upload php...

photopostvbgal-upload.txt

vBulletin PhotoPost vBGallery v2.x Remote File Upload Found by : Cold z3ro e-mail : [email protected] Home page : www.Hack.ps ============================== exploit usage : http://localhost/Forum/$gallerypath/upload.php here the exploiter can upload php shell via this script by renamed it's...

PhotoPost vBGallery 2.4.2 - Arbitrary File Upload

PhotoPost vBGallery 2.4.2 - Arbitrary File Upload vBulletin PhotoPost vBGallery v2.x Remote File Upload Found by : Cold z3ro e-mail : [email protected] Home page : www.Hack.ps ============================== exploit usage : http://localhost/Forum/$gallerypath/upload.php here the exploiter ca...

PhotoPost vBGallery 2.4.2 - Arbitrary File Upload

vBulletin PhotoPost vBGallery v2.x Remote File Upload Found by : Cold z3ro e-mail : [email protected] Home page : www.Hack.ps ============================== exploit usage : http://localhost/Forum/$gallerypath/upload.php here the exploiter can upload php shell via this script by renamed it's...