102 matches found
53KF企业在线平台LFI一枚
简要描述： http://chat.53kf.com/ LFI一枚 配合 http://chat.53kf.com/test.php 的phpinfo信息...导致xxoo.. 详细说明： http://chat.53kf.com/login.php/ 修改请求 Cookie: customerservicelanguage=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00 结果： 加上phpinfo提供的信息： 未经授权....不进一步了。。 漏洞证明：...
Design/Logic Flaw
Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS...
Authentication Bypass Vulnerability in phpLiterAdmin
High-Tech Bridge SA Security Research Lab has discovered vulnerability in phpLiterAdmin which could be exploited to bypass authentication mechanism and gain unauthorized access to the application. 1 Authentication Bypass Vulnerability in phpLiterAdmin The vulnerability exists due to a design erro...
Yourownbux 4.0 - cookie Authentication Bypass
Yourownbux 4.0 - cookie Authentication Bypass !/usr/bin/perl use LWP::UserAgent; use HTTP::Request; +-------------------------------------------------------------------------------------------------+- + Yourownbux v4.0 ------------------------------------------------------------+--+ + Cookie...
Yourownbux 4.0 - 'cookie' Authentication Bypass
!/usr/bin/perl use LWP::UserAgent; use HTTP::Request; +-------------------------------------------------------------------------------------------------+- + Yourownbux v4.0 ------------------------------------------------------------+--+ + Cookie Modification Exploit...
CVE-2002-2303
3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data...
xeforum-privesc.txt
-------------------------------------------------------------------- XEForum Cookie Modification Privilege Escalation Vulnerability -------------------------------------------------------------------- Vulnerable product: XEForum Vendor: http://www.xeforum.com/ Date: -------------------- Found: Ju...
XEForum Cookie Modification Privilege Escalation Vulnerability
-------------------------------------------------------------------- XEForum Cookie Modification Privilege Escalation Vulnerability -------------------------------------------------------------------- Vulnerable product: XEForum Vendor: http://www.xeforum.com/ Date: -------------------- Found: Ju...
ASP-Nuke Community <= 1.5 Cookie Privilege Escalation Vulnerability
No description provided by source. Title : ASP-Nuke Community = v1.5 Cookie Modification Privilege Escalation Vulnerability Author : ajann S.Page : http://www.rot.dk D.Page : http://www.rot.dk/aspnuke/downloads.asp Greetz : Nukedx Cookie ---------- Open the Cookie Editor= Find cookie informations...
[KAPDA::#52] - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability
KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability KAPDA New advisory Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23, 2005 Vendor Contacted: Jun 01, 2006...
PHP-Post 1.0 - Cookie Modification Privilege Escalation
PHP-Post 1.0 - Cookie Modification Privilege Escalation KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23,...
PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability
Exploit for unknown platform in category web applications =================================================================== PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability =================================================================== KAPDA::52 - PHP-Post 1.0 Cookie...
PHP-Post 1.0 - Cookie Modification Privilege Escalation
KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23, 2005 Vendor Contacted: Jun 01, 2006 Release Date: July 18...
PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability
No description provided by source. KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23, 2005 Vendor Contacted:...
CVE-2005-2464
login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the target userid...
CVE-2005-2464
CVE-2005-2464 affects PCXP/TOPPE CMS. The issue allows remote attackers to bypass authentication and gain privileges by modifying the user’s cookie to match the target userid, enabling partial confidentiality/integrity/availability impact per CVSS. The provided documents do not specify affected v...
CVE-2005-3495
Ar-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies...
CVE-2005-3495
CVE-2005-3495 affects Ar-blog (versions 5.2 and earlier). The vulnerability allows remote attackers to bypass authentication by manipulating cookies, indicating a flaw in how session/authentication state is enforced. The available documents confirm the vulnerability pattern (cookie-based auth byp...