CVE-2007-2625: Undefined Security Weakness

Cross-site scripting XSS vulnerability in shared/code/cpauthorization.php in All In One Control Panel AIOCP before 1.3.016 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in All In One Control Panel AIOCP 1.3.010 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 xusername parameter to shared/code/cpauthorization.php, and the 2 did parameter to...

aiocp-bypass.txt

i Product Name: AIOCP - All In One Control Panel i Vulnerable Versions: = 1.3.009 i Bug found by: Coloss i Contact: [email protected] i Date: 9.1.2007 i Spec: AIOCP doesn't check the username posted by the client before using this to check authentication, so SQL Injection is possible Example show...