559 matches found
phpBB <= 2.0.12 Change User Rights Authentication Bypass (c code)
No description provided by source. / Paisterist's code was nice but heres mil's version. precompiled: http://www.milw0rm.com/sploits/897.rar Usage: bcc32 897.cpp and place the exe in your firefox profile dir. Usually C:\Documents and Settings\Application...
phpBBsession.txt
phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2- Open the cookies.txt ..located on "C:\Documents and...
phpbb2012.txt
-------------------------------------------------------------------- Written by [email protected] -------------------------------------------------------------------- -------------------------------------------------------------------- Exploit : 2.0.x = phpbb 2.0.12 :...
phpBB 2.0.12 - Session Handling Authentication Bypass
phpBB 2.0.12 - Session Handling Authentication Bypass phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2-...
phpBB <= 2.0.12 Session Handling Authentication Bypass (tutorial 2)
No description provided by source. phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2- Open the cookies.t...
phpBB <= 2.0.12 Session Handling Authentication Bypass (tutorial 2)
Exploit for unknown platform in category web applications =================================================================== phpBB = 2.0.12 Session Handling Authentication Bypass tutorial 2 =================================================================== phpBB 2.0.12 Session Handling...
phpBB 2.0.12 - Session Handling Authentication Bypass
phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2- Open the cookies.txt ..located on "C:\Documents and...
phpBB <= 2.0.12 Session Handling Authentication Bypass (tutorial)
No description provided by source. 1. Register at forum? 2. Log in with account + UNCHECK "Log in automatically" 3. Close browser to be sure a cookie is made. 4. Locate cookie firefox: X:\Documents and Settings\Name\Application Data\Mozilla\Firefox\Profiles\profile.default\cookies.txt -- search t...
phpBB 2.0.12 - Session Handling Authentication Bypass (tutorial)
Register at forum? 2. Log in with account + UNCHECK "Log in automatically" 3. Close browser to be sure a cookie is made. 4. Locate cookie firefox: X:\Documents and Settings\Name\Application Data\Mozilla\Firefox\Profiles\profile.default\cookies.txt -- search the .txt for the domainname domain.tld...
foros32.txt
I discovered a security issue that affects the following my-forum.org release: FOROS v.3.2 - http://my-forum.org/index.php?id=Ingles When you are logged in with an account, you need edit the cookie of the site and change the value where your username is and replace it for the victim's username...
CVE-2004-1661
MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."...
SQL-инъекция в phpAdsNew
--------------------------------------------------------- SQL-инъекция в phpAdsNew --------------------------------------------------------- Автор: Григоров Роман Дата: Январь 13, 2005 e-mail: roman at mosk dot ru Icq: 157535663 --------------------------------------------------------- Уязвимый...
CVE-2004-2736
Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie...
CVE-2004-0867
Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected...
CVE-2004-1605
SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator...
SiteCubed MailWorks Professional - Authentication Bypass
SiteCubed MailWorks Professional - Authentication Bypass source: https://www.securityfocus.com/bid/11095/info MailWorks Professional is reported prone to an authentication bypass vulnerability. The application uses cookies to store variables that determine the status of the authentication process...
miniPortail admin.php Cookie Manipulation Admin Access
Binary data 1528.prm...
Jaws 0.20.3 - Cookie Manipulation Authentication Bypass
Jaws 0.20.3 - Cookie Manipulation Authentication Bypass source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS i...
Jaws 0.2/0.3 - Cookie Manipulation Authentication Bypass
source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a cross-site scripting vulnerability. This...
Get admin level on Goldlink script v3.0
There is a bug in script of links Goldlink v3.0 http://www.goldscripts.com/goldlink.php. You can access to panel with admin privileges. The bug is in variables.php file: function Acceso global $extension; global $tbadmin; global $HTTPCOOKIEVARS; $vadminlogin=$HTTPCOOKIEVARS"vadminlogin";...