566 matches found
phpnuke80-cookie.txt
///////////////////////////////////////////////////////////////////////////////////////////////////// PHPNuke Preferences - Multilingual Options- On Activate Multilingual features? = YES ///////////////////////////////////////////////////////////////////////////////////////////////////// Bug is...
PHP-Nuke <= 8.0 Cookie Manipulation (lang)
///////////////////////////////////////////////////////////////////////////////////////////////////// PHPNuke = 8.0 Cookie Manipulation lang PROGRAM: PHP-Nuke HOMEPAGE: http://phpnuke.org/ VERSION: All version BUG: Cookie Manipulation lang SQL Injection + Local file include AUTHOR: Aleksandar aka...
[Full-disclosure] Web 2.0 backdoors made easy with MSIE & XMLHttpRequest
As you probably know, the famous "web 2.0" XMLHttpRequest object allows client-side web scripts to send nearly arbitrary HTTP requests, and then freely analyze and manipulate the returned response, including HTTP headers. This gives an unprecedented level of control over your browser to the autho...
Linpha远程验证绕过漏洞 Exploit
No description provided by source. Fernando Quintero （[email protected]）提供了如下测试方法： ?PHP setcookie"linphauserid","1",time+86400365,'/linpha'; setcookie"linphapassword","' or '3'='3",time+86400365,'/linpha'; ?...
CVE-2006-4914
Directory traversal vulnerability in A.l-Pifou 1.8p2 allows remote attackers to read arbitrary files via ".." sequences in the zelangue02 cookie, as demonstrated by using the choixlng parameter to choixlangue.php to indirectly set the cookie, then accessing livredor.php to trigger the inclusion...
CVE-2006-4244
SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-username cookie matches the value of the sessionid parameter, which allows remote attackers to gain access as any logged-in user by setting the cookie and the parameter to the same value...
DeluxeBB Multiple Vulnerabilities
DeluxeBB Multiple Vulnerabilities Author: Attila Gerendi Darkz Date: July 30, 2006 Package: DeluxeBB http://www.deluxebb.com/ Versions Affected: 1.08 Other versions may also be affected. Severity: Cross-Site Scripting, Cookie Manipulation, Login Bypass Cross-Site Scripting: When posting a new top...
[MajorSecurity #26] Woltlab Burning Board - Multiple Cookie manipulation and session fixation vulnerabilities
MajorSecurity 26 Woltlab Burning Board - Multiple Cookie manipulation and session fixation vulnerabilities ---------------------------------------------------------------------------------------- Software: Woltlab Burning board Impact: Cookie manipulation and Session Fixation Made public: July,...
CVE-2006-3797
CVE-2006-3797 describes an SQL injection vulnerability in DeluxeBB 1.07 and earlier that lets remote attackers bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies. The issue enables manipulation of authentication-related flows and user setting...
DeluxeBB 1.07 - Remote Create Admin
DeluxeBB 1.07 - Remote Create Admin !/usr/bin/perl DeluxeBB new or die; $cookiejar = HTTP::Cookies-new; $xpl-cookiejar $cookiejar ; $res = $xpl-post$url.'misc.php', Content = "sub" = "login", "name" = "$uname", "password" = "$passwd", "submit" = "Log-in", "redirect" = "", "expiry" = "990090909", ...
Authentication flaw
FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1...
Directory traversal
Directory traversal vulnerability in the session handling class GallerySession.class in Gallery 2 up to 2.0.2 allows remote attackers to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is sanitized...
MyBB104SQL.txt
!/usr/bin/perl -w MyBB : DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! use IO::Socket; -- Start -- $host = "127.0.0.1"; $path = "/mybb3/"; $userid = 1; $mycookie = "mybbuser=1xommhw5h9kZZGSFUppacVfacykK1gnd84PLehjlhTGC1ZiQkXr;"; -- END -- $host...
vuBB <= 0.2 (Cookie) Final Remote SQL Injection Exploit (mq=off)
No description provided by source. !/usr/bin/perl print q ---------------------------------------------------------------------- vuBB =0.2 Final Remote SQL Injection cookies Exploit exploit discovered and coded by KingOfSKa https://contropotere.netsons.org...
MyBulletinBoard (MyBB) 1.03 - misc.php SQL Injection
MyBulletinBoard MyBB 1.03 - misc.php SQL Injection MyBB New SQL Injection D3vil-0x1 Milw0rm ID :- http://www.milw0rm.com/auth.php?id=1320 The Inf.File :- misc.php Linez :- code $buddies = $mybb-user'buddylist'; $namesarray = explode",",$buddies; ifisarray$namesarray whilelist$key, $buddyid =...
CVE-2005-2464
login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the target userid...
gmailbug.txt
Gmail Bug - INTRODUCTION This bug has already been corrected, that's why it's been published. In this manual you will see step by step how to exploit Gmail's vulnerability, that gave you access to any account, reported by Anelkaos, colaborator of elhacker.net's forum and patched by Google by...
CVE-2002-2163
KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "alreadyvoted" cookie by various methods, including a direct call to clearcookies.php...
ASP-Nuke伪造Cookie导致信息泄露漏洞
BugCVE: CVE-2002-0523 BUGTRAQ: 4489 ASP-Nuke存在设计问题，可导致攻击者获得主机相关敏感信息。 攻击者可以本地修改Cookie信息并提交，导致主机返回所有当前登陆用户列表或者返回包含WEB ROOT路径的错误信息。 攻击者可以利用这些信息进一步对系统进行攻击。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke -------- 目前厂商已经在最新版本的软件中修补了此漏洞，请到厂商的主页获取最新版本： http://www.asp-nuke.com/downloads.asp...