CVE-2007-2555

Podium CMS (Default.aspx) CVE-2007-2555 is described across multiple sources as an unspecified vulnerability that could allow remote attackers to manipulate cookies via a META http-equiv Set-Cookie in the id parameter, with an uncertain impact (possibly session fixation) and a note that it may be...

CVE-2007-2548

Unspecified vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 has unknown impact and an l remote attack vector, related to "Cookie Manipulation."...

Code injection

Unspecified vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 has unknown impact and an l remote attack vector, related to "Cookie Manipulation."...

CVE-2007-2548

Unspecified vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 has unknown impact and an l remote attack vector, related to "Cookie Manipulation."...

CVE-2007-2548

Summary: CVE-2007-2548 concerns TurnkeyWebTools SunShop Shopping Cart 4.0 with an issue in index.php described as a vulnerability tied to cookie manipulation and a remote attack vector . The exact impact is listed as unknown in the description. The available data indicate a remote, low-complexity...

podium-cookie.txt

Podium CMS - Cookie Manipulation Exploit Podium CMS - Cookie Manipulation Exploitdiscovered by John MartinelliGoogle d0rk: inurl:"podium/Default.aspx" "...

UPDATED: CubeCart (v3.0.15) - CRLF Injection Vulnerability

Note to BugTraq: Forgot to tell which files are vulnerable. Sorry! CubeCart v3.0.15 - CRLF Injection Vulnerability It is possible to set the cookie prefixed with ccSID to cause CRLF injection. Vulnerable files: cart.php, index.php HTTP Request: ------------- GET / HTTP/1.0 Accept: / User-Agent:...

Nuked-klaN 1.7.6 - Remote Code Execution

Website: http://www.acid-root.new.fr/ PHP conditions: None = Private since 2 months. errorreportingEALL ^ ENOTICE; This file require the PhpSploit class. $xpl = new phpsploit; $url = 'http://localhost/nk/'; url $prx = ''; proxy : $pra = ''; basic authentification $xpl-agent"Firefox";...

[MajorSecurity Advisory #45]oe2edit CMS - Cross Site Scripting and Cookie Manipulation Issue

MajorSecurity Advisory 45oe2edit CMS - Cross Site Scripting and Cookie Manipulation Issue Details ======= Product: oe2edit CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.oe2edit.com Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Dav...

[MajorSecurity Advisory #43]Calacode ATMail 5.0 - Cross Site Scripting and Cookie Manipulation Issue

MajorSecurity Advisory 43Calacode ATMail 5.0 - Cross Site Scripting and Cookie Manipulation Issue Details ======= Product: @Mail 5.0 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.atmail.com/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered b...

CVE-2007-1925

The borrado function in modules/YourAccount/index.php in Tru-Zone Nuke ET 3.4 before fix 7 does not verify that account deletion requests come from the account owner, which allows remote authenticated users to delete arbitrary accounts via a modified cookie...

Magic Forum EXP-vulnerability warning-the black bar safety net

GET /wap/associate. php? do=1 HTTP/1.1 Host: bbs. hongse. net. cn Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: EN-us,EN;q=0.9,en;q=0.8 Accept-Charset: iso-8 8 5 9-1, utf-8, utf-1 6, ;q=0.1 Cookie:...

Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (1)

!/usr/bin/php Options OPTIONS | -proxy If you wanna use a proxy | -proxyauth Basic authentification ";exit1; $url = getparam'url',1; $pro = getparam'proxy'; $pra = getparam'proyauth'; $xpl = new phpsploit; $xpl-agent'Mozilla Firefox'; if$pro $xpl-proxy$pro; if$pra $xpl-proxyauth$pra; +print.php S...

phpnuke80-cookie.txt

///////////////////////////////////////////////////////////////////////////////////////////////////// PHPNuke Preferences - Multilingual Options- On Activate Multilingual features? = YES ///////////////////////////////////////////////////////////////////////////////////////////////////// Bug is...

PHP-Nuke <= 8.0 Cookie Manipulation (lang)

///////////////////////////////////////////////////////////////////////////////////////////////////// PHPNuke = 8.0 Cookie Manipulation lang PROGRAM: PHP-Nuke HOMEPAGE: http://phpnuke.org/ VERSION: All version BUG: Cookie Manipulation lang SQL Injection + Local file include AUTHOR: Aleksandar aka...

[Full-disclosure] Web 2.0 backdoors made easy with MSIE & XMLHttpRequest

As you probably know, the famous "web 2.0" XMLHttpRequest object allows client-side web scripts to send nearly arbitrary HTTP requests, and then freely analyze and manipulate the returned response, including HTTP headers. This gives an unprecedented level of control over your browser to the autho...

Linpha远程验证绕过漏洞 Exploit

No description provided by source. Fernando Quintero （[email protected]）提供了如下测试方法： ?PHP setcookie"linphauserid","1",time+86400365,'/linpha'; setcookie"linphapassword","' or '3'='3",time+86400365,'/linpha'; ?...

CVE-2006-4914

Directory traversal vulnerability in A.l-Pifou 1.8p2 allows remote attackers to read arbitrary files via ".." sequences in the zelangue02 cookie, as demonstrated by using the choixlng parameter to choixlangue.php to indirectly set the cookie, then accessing livredor.php to trigger the inclusion...

CVE-2006-4244

SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-username cookie matches the value of the sessionid parameter, which allows remote attackers to gain access as any logged-in user by setting the cookie and the parameter to the same value...

DeluxeBB Multiple Vulnerabilities

DeluxeBB Multiple Vulnerabilities Author: Attila Gerendi Darkz Date: July 30, 2006 Package: DeluxeBB http://www.deluxebb.com/ Versions Affected: 1.08 Other versions may also be affected. Severity: Cross-Site Scripting, Cookie Manipulation, Login Bypass Cross-Site Scripting: When posting a new top...