mforum-admin.txt

================================================= MFORUM 0.1a Arbitrary Add-Admin Vulnerability ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------|...

Maian Scripts Cookie Manipulation Authentication Bypass

The remote host is running at least one PHP application from Maian Script World that allows a remote attacker to bypass authentication and access the admin control panel by simply setting a special cookie. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

MFORUM 0.1a Arbitrary Add-Admin Vulnerability

No description provided by source. ================================================= MFORUM 0.1a Arbitrary Add-Admin Vulnerability ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

MFORUM 0.1a - Arbitrary Add Admin

MFORUM 0.1a - Arbitrary Add Admin ================================================= MFORUM 0.1a Arbitrary Add-Admin Vulnerability ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

MFORUM 0.1a - Arbitrary Add Admin

================================================= MFORUM 0.1a Arbitrary Add-Admin Vulnerability ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------|...

ImperialBB 2.3.5 - Arbitrary File Upload

ImperialBB 2.3.5 - Arbitrary File Upload Title : ImperialBB :\r\n\n"; $code = trimfgetsSTDIN; $socket = @fsockopen$argv1, 80, $eno, $estr, 30...

ImperialBB 2.3.5 - Arbitrary File Upload

Title : ImperialBB :\r\n\n"; $code = trimfgetsSTDIN; $socket = @fsockopen$argv1, 80, $eno, $estr, 30; if!$socket die"Could not connect to ".$argv1."...

XnView 1.93.6 - .taac Local Buffer Overflow

XnView 1.93.6 - .taac Local Buffer Overflow include include / XnView 1.93.6 for Windows .taac buffer overflow proof of concept. The vulnerability is caused due to a boundary error when processing the "format" keyword of Sun TAAC files. This can be exploited to cause a stack-based buffer overflow ...

vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index

====================================================================== Advisory : XSS in modcp index Release Date : June 17th 2008 Application : vBulletin Version : vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors : Jessic...

vBulletin 3.7.1 - Moderation Control Panel redirect Cross-Site Scripting

vBulletin 3.7.1 - Moderation Control Panel redirect Cross-Site Scripting source: https://www.securityfocus.com/bid/29817/info vBulletin is prone to a cross-site scripting vulnerability that occurs in the MCP moderation control panel because the application fails to properly sanitize user-supplied...

vBulletin 3.7.1 - Moderation Control Panel 'redirect' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29817/info vBulletin is prone to a cross-site scripting vulnerability that occurs in the MCP moderation control panel because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

CVE-2008-2756

Cross-site scripting XSS vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-2756

CVE-2008-2756 is an XSS vulnerability in the admin/users.asp page of Xigla Absolute Control Panel XE 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via the name parameter (and other unspecified parameters). The available connected documents confirm the affected prod...

CVE-2008-2756

Cross-site scripting XSS vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-2756: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors and an "obscure method." NOTE: the vector is probably in the redirect parameter to the Admin Control Panel admincp/index.php...

Anata CMS 1.0b5 (change.php) Arbitrary Add Admin Vulnerability

No description provided by source. =============================================== Anata CMS 1.0b5 Arbitrary Add-Admin Exploit =============================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

anatacms-admin.txt

=============================================== Anata CMS 1.0b5 Arbitrary Add-Admin Exploit =============================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | /...

Anata CMS 1.0b5 (change.php) Arbitrary Add Admin Vulnerability

Exploit for unknown platform in category web applications ============================================================== Anata CMS 1.0b5 change.php Arbitrary Add Admin Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||...

Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10)

====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...