CVE-2009-4262

HB-NS NewsScript 1.3 is affected by CVE-2009-4262, where remote attackers can obtain access to the admin control panel by making a direct request to admin.php. The vulnerability is described in multiple sources (NVD) with a CVSS v2 base score of 7.5 (HIGH) and an attack vector of NETWORK, requiri...

CVE-2009-4262: Undefined Security Weakness

Harold Bakker's NewsScript HB-NS 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to admin.php...

CVE-2009-4222

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

Design/Logic Flaw

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

CVE-2009-4222

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

CVE-2009-4222: Undefined Security Weakness

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

Invision Power Board 2.3.6/3.0.4 - Local File Inclusion / SQL Injection

============================================= - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- Invision Power Board = 3.0.4 Local PHP File Inclusion and SQL Injection Invision Power Board = 2.3.6 SQL Injection II. BACKGROUND...

phpBazar-2.1.1fix - Remote Administration-Panel

phpBazar-2.1.1fix - Remote Administration-Panel phpBazar-2.1.1fix Remote Administration-Panel Vulnerability Found by? :? kurdish hackers team C0ntact : pshela at YaHoo .com ?????????????????? Groups : Kurd-Team site?? : www.kurdteam.org =======================================================...

phpBazar 2.1.1fix Remote Administration-Panel Vulnerability

Exploit for unknown platform in category web applications =========================================================== phpBazar-2.1.1fix Remote Administration-Panel Vulnerability =========================================================== =======================================================...

phpBazar-2.1.1fix Remote Administration-Panel Vulnerability

No description provided by source. phpBazar-2.1.1fix Remote Administration-Panel Vulnerability ! Found by? :? kurdish hackers team ! C0ntact : pshela at YaHoo .com ?????????????????? ! Groups : Kurd-Team ! site?? : www.kurdteam.org =======================================================...

W3infotech ( Auth Bypass ) SQL Injection Vulnerability

No description provided by source. + |ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ +====================================================================|| About : W3infotech Auth Bypass SQL injection Vulnerability || ! Site : http://www.w3infotech.com || ! Author :...

W3infotech SQL Injection

another exploit link : http://hell-z0ne.org/w3infotech.txt + |ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ +====================================================================|| About : W3infotech Auth Bypass SQL injection Vulnerability || ! Site :...

W3infotech - Authentication Bypass

|ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ +====================================================================|| About : W3infotech Auth Bypass SQL injection Vulnerability || ! Site : http://www.w3infotech.com || ! Author : ViRuSHiMa || ! Site :...

CVE-2009-3567: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/tickets/functionsticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145...

Remote file inclusion

PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-3220

PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-3220

The CVE-2009-3220 entry applies to All In One Control Panel (AIOCP) 1.4.001, where a PHP remote file inclusion vulnerability exists in cp_html2txt.php. An attacker can supply a URL in the page parameter to cause arbitrary PHP code execution on the remote host. The vulnerability is triggered throu...

CVE-2009-3220

PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-3220: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

NetAccess IP3 - (Authenticated) Ping Option Command Injection

NetAccess IP3 - Force into shell By: r00t Shouts: G., Tee, ES, s1ngl3, and D1g1t5 Requirements: Remote access to an IP3 Any level control panel username/password Vendor Information: Thanks to Sebastian Wolfgarten sebastian at wolfgarten dot com for including vendor information in his AFD vuln...