559 matches found
BlogPHP 2.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/29133/info BlogPHP is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue, an HTML-injection issue, and a cookie-manipulation issue. Attackers can exploit these issues to execute arbitrary script code in the context ...
Mutiple Timesheets <= 5.0 Multiple Remote Vulnerabilities
No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Mutiple Timesheets = 5.0 - Multiple Remote Vulnerabilities +==-- --==+====================================================================================+==-- +...
Mutiple Timesheets <= 5.0 - Multiple Remote Vulnerabilities
JosS + Spanish Hackers Team + Sys - Project + Info: Software: Mutiple Timesheets Download: http://riceball.com/drupal/files/mts-5.zip Exploit: Multiple Remote Vulnerabilities High Bug Found By: Jose Luis Gуngora Fernбndez | JosS Contact: sys-projectathotmail.com Web:...
timesheets-multi.txt
--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Mutiple Timesheets 'alert"JosS"%3B + Cookie Manipulation: Vuln File: index.php, clientinfo.php, invoices.php, smartlinks.php, todo.php Exploit: http://localhost/PATH/index.php?mode=edit&tab=Cookie...
mutiple timesheets 5.0 - Multiple Vulnerabilities
mutiple timesheets 5.0 - Multiple Vulnerabilities --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Mutiple Timesheets 'alert"JosS"%3B + Cookie Manipulation: Vuln File: index.php, clientinfo.php, invoices.php, smartlinks.php, todo.php Exploit:...
Mutiple Timesheets <= 5.0 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= Mutiple Timesheets 'alert"JosS"%3B + Cookie Manipulation: Vuln File: index.php, clientinfo.php, invoices.php, smartlinks.php, todo.php Exploit:...
mutiple timesheets 5.0 - Multiple Vulnerabilities
--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Mutiple Timesheets 'alert"JosS"%3B + Cookie Manipulation: Vuln File: index.php, clientinfo.php, invoices.php, smartlinks.php, todo.php Exploit: http://localhost/PATH/index.php?mode=edit&tab=Cookie...
eazyPortal 1.0 - cookie SQL Injection
eazyPortal 1.0 - cookie SQL Injection !/usr/bin/perl Vendor url: http://www.eazyportal.com/ by Iron - http://www.randombase.com exploit goes through $COOKIE use LWP::UserAgent; use MIME::Base64; print " EazyPortal ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .=...
Code injection
The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remaining allowed login attempts in a cookie, which makes it easier for remote attackers to conduct brute force attacks by manipulating this cookie's value...
CVE-2008-0915
The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remaining allowed login attempts in a cookie, which makes it easier for remote attackers to conduct brute force attacks by manipulating this cookie's value...
MOJO IWms 7 - default.asp Cookie Manipulation
MOJO IWms 7 - default.asp Cookie Manipulation source: https://www.securityfocus.com/bid/41746/info MOJO IWMS is prone to a cookie-manipulation vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this vulnerability could allow an attacker to masquerade as another...
MOJO IWms 7 - 'default.asp' Cookie Manipulation
source: https://www.securityfocus.com/bid/41746/info MOJO IWMS is prone to a cookie-manipulation vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this vulnerability could allow an attacker to masquerade as another user. This may allow the attacker to steal...
Flat PHP Board <= 1.2 Multiple Vulnerabilities
--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
flatphp-multi.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flat PHP...
Flat PHP Board 1.2 - Multiple Vulnerabilities
Flat PHP Board 1.2 - Multiple Vulnerabilities --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
Flat PHP Board 1.2 - Multiple Vulnerabilities
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flat PHP...
CVE-2007-6013
CVE-2007-6013 affects WordPress 1.5 through 2.3.1. The issue stems from authentication cookies generated from an MD5 hash of a password hash, allowing an attacker who can access the user database to create a valid authentication cookie and bypass login. The connected OpenVAS entries reference Fed...
Code injection
Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrators to inject arbitrary PHP code into a description.it.php file in a subdirectory of Download/ by saving a description and setting fneditmode to 1. NOTE: unauthenticated remote...
CVE-2007-5772
Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrators to inject arbitrary PHP code into a description.it.php file in a subdirectory of Download/ by saving a description and setting fneditmode to 1. NOTE: unauthenticated remote...
CVE-2007-5772
CVE-2007-5772 describes a direct static code injection in the Flatnuke 3 download module. The vulnerability allows remote authenticated administrators to inject arbitrary PHP code into a file named description.it.php under a subdirectory of Download/ by saving a description and setting fneditmode...