3650 matches found
printlog-disclose.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works based on flat files. The idea is derived from a...
PHPJabbers Post Comments 3.0 - Cookie Authentication Bypass
PHPJabbers Post Comments 3.0 - Cookie Authentication Bypass source: https://www.securityfocus.com/bid/31467/info PHPJabbers Post Comments is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. An attacker...
PHPJabbers Post Comments 3.0 - Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/31467/info PHPJabbers Post Comments is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. An attacker can exploit this vulnerability to gain administrative access...
Post Comments 3.0 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ======================================================== Post Comments 3.0 Insecure Cookie Handling Vulnerability ======================================================== Post Comments v3.0 Insecure Cookie Handling Vulnerability By...
postcomments-cookie.txt
Post Comments v3.0 Insecure Cookie Handling Vulnerability By CrackersChild Demo : http://www.phpjabbers.com/post-comment/try/admin.php Vendor : by phpjabbers.com Exploit : javascript:document.cookie = "PostCommentsAdmin=logged; path=/"; Tum Musluman Aleminin Ramazan Bayrami Kutlu Olsun...
Post Comments 3.0 - Insecure Cookie Handling
Post Comments 3.0 - Insecure Cookie Handling Post Comments v3.0 Insecure Cookie Handling Vulnerability By CrackersChild Demo : http://www.phpjabbers.com/post-comment/try/admin.php Vendor : by phpjabbers.com Exploit : javascript:document.cookie = "PostCommentsAdmin=logged; path=/"; Tum Musluman...
Post Comments 3.0 Insecure Cookie Handling Vulnerability
No description provided by source. Post Comments v3.0 Insecure Cookie Handling Vulnerability By CrackersChild Demo : http://www.phpjabbers.com/post-comment/try/admin.php Vendor : by phpjabbers.com Exploit : javascript:document.cookie = "PostCommentsAdmin=logged; path=/"; Tum Musluman Aleminin...
Simple PHP Blog config/users.php Arbitrary User Password Hash Disclosure
The version of Simple PHP Blog installed on the remote host allows an unauthenticated, remote attacker to retrieve information about non-admin users defined to the application, including their user names and password hashes, which could in turn be used to gain access to the application. While the...
ZeeReviews - SQL Injection
ZeeReviews - SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability ZeeReviews comments.php ItemID http://www.zeescripts.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...
CVE-2008-3353
Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...
CVE-2008-3353
Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...
PT-2008-4758 · Pure · Pure Software Lore
Name of the Vulnerable Software and Affected Versions: Pure Software Lore versions prior to 1.7.0 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related ...
Diigo Toolbar crossite scripting
Crossite scripting with publiс comments...
Sql injection
SQL injection vulnerability in comments.php in DCFM Blog 0.9.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
DCFM Blog 0.9.4 (comments) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= DCFM Blog 0.9.4 comments Remote SQL Injection Vulnerability ============================================================= Title =======:: DCFM Blog 0.9.4 comments Remote SQL...
Authentication flaw
BlogPHP 2.0 allows remote attackers to bypass authentication, and post 1 messages or 2 comments as an arbitrary user, via a modified blogphpusername field in a cookie...
CVE-2008-2524
BlogPHP 2.0 allows remote attackers to bypass authentication, and post 1 messages or 2 comments as an arbitrary user, via a modified blogphpusername field in a cookie...
Sql injection
SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the AMGid parameter in a comments action...