579 matches found
Mutiple Timesheets <= 5.0 - Multiple Remote Vulnerabilities
JosS + Spanish Hackers Team + Sys - Project + Info: Software: Mutiple Timesheets Download: http://riceball.com/drupal/files/mts-5.zip Exploit: Multiple Remote Vulnerabilities High Bug Found By: Jose Luis Gуngora Fernбndez | JosS Contact: sys-projectathotmail.com Web:...
timesheets-multi.txt
--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Mutiple Timesheets 'alert"JosS"%3B + Cookie Manipulation: Vuln File: index.php, clientinfo.php, invoices.php, smartlinks.php, todo.php Exploit: http://localhost/PATH/index.php?mode=edit&tab=Cookie...
Mutiple Timesheets <= 5.0 Multiple Remote Vulnerabilities
No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Mutiple Timesheets = 5.0 - Multiple Remote Vulnerabilities +==-- --==+====================================================================================+==-- +...
mutiple timesheets 5.0 - Multiple Vulnerabilities
--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Mutiple Timesheets 'alert"JosS"%3B + Cookie Manipulation: Vuln File: index.php, clientinfo.php, invoices.php, smartlinks.php, todo.php Exploit: http://localhost/PATH/index.php?mode=edit&tab=Cookie...
Mutiple Timesheets <= 5.0 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= Mutiple Timesheets 'alert"JosS"%3B + Cookie Manipulation: Vuln File: index.php, clientinfo.php, invoices.php, smartlinks.php, todo.php Exploit:...
mutiple timesheets 5.0 - Multiple Vulnerabilities
mutiple timesheets 5.0 - Multiple Vulnerabilities --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Mutiple Timesheets 'alert"JosS"%3B + Cookie Manipulation: Vuln File: index.php, clientinfo.php, invoices.php, smartlinks.php, todo.php Exploit:...
eazyPortal 1.0 - cookie SQL Injection
eazyPortal 1.0 - cookie SQL Injection !/usr/bin/perl Vendor url: http://www.eazyportal.com/ by Iron - http://www.randombase.com exploit goes through $COOKIE use LWP::UserAgent; use MIME::Base64; print " EazyPortal ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .=...
CVE-2008-0915
The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remaining allowed login attempts in a cookie, which makes it easier for remote attackers to conduct brute force attacks by manipulating this cookie's value...
Code injection
The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remaining allowed login attempts in a cookie, which makes it easier for remote attackers to conduct brute force attacks by manipulating this cookie's value...
MOJO IWms 7 - default.asp Cookie Manipulation
MOJO IWms 7 - default.asp Cookie Manipulation source: https://www.securityfocus.com/bid/41746/info MOJO IWMS is prone to a cookie-manipulation vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this vulnerability could allow an attacker to masquerade as another...
MOJO IWms 7 - 'default.asp' Cookie Manipulation
source: https://www.securityfocus.com/bid/41746/info MOJO IWMS is prone to a cookie-manipulation vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this vulnerability could allow an attacker to masquerade as another user. This may allow the attacker to steal...
Flat PHP Board <= 1.2 Multiple Vulnerabilities
--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
flatphp-multi.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flat PHP...
Flat PHP Board 1.2 - Multiple Vulnerabilities
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flat PHP...
Flat PHP Board 1.2 - Multiple Vulnerabilities
Flat PHP Board 1.2 - Multiple Vulnerabilities --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
CVE-2007-6013
CVE-2007-6013 affects WordPress 1.5 through 2.3.1. The issue stems from authentication cookies generated from an MD5 hash of a password hash, allowing an attacker who can access the user database to create a valid authentication cookie and bypass login. The connected OpenVAS entries reference Fed...
Code injection
Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrators to inject arbitrary PHP code into a description.it.php file in a subdirectory of Download/ by saving a description and setting fneditmode to 1. NOTE: unauthenticated remote...
CVE-2007-5772
Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrators to inject arbitrary PHP code into a description.it.php file in a subdirectory of Download/ by saving a description and setting fneditmode to 1. NOTE: unauthenticated remote...
CVE-2007-5772
CVE-2007-5772 describes a direct static code injection in the Flatnuke 3 download module. The vulnerability allows remote authenticated administrators to inject arbitrary PHP code into a file named description.it.php under a subdirectory of Download/ by saving a description and setting fneditmode...
php cross-site cookie insertion
The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...