7690 matches found
CVE-2009-1637: Undefined Security Weakness
profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters...
Patch Tuesday barrage: A bad case of amnesia
Yesterday was a perfect example of the lack of communication between software vendors and their customers about security. Three vendors released major patches for serious bugs, all within hours of each other. You would think that customers would be a high priority for all vendors, especially in...
Simple Customer 1.3 Arbitrary Change Admin Password Exploit
No description provided by source. ---- Remote Change admin Password---- ---------------------------- script:Simple Customer 1.3 ---------------------------- Author: ahmadbady email:[email protected] -------------------- download from:http://www.simplecustomer.com/ New Version 1.3...
Simple Customer 1.3 Password Changer
---- Remote Change admin Password---- ---------------------------- script:Simple Customer 1.3 ---------------------------- Author: ahmadbady email:[email protected] -------------------- download from:http://www.simplecustomer.com/ New Version 1.3 -------------------- xpl: coded by ahmadbady...
Realty Web-Base 1.0 SQL Injection
--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 Auth bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...
Realty Web-Base 1.0 - Authentication Bypass
--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 Auth bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...
Realty Web-Base 1.0 (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= Realty Web-Base 1.0 Auth Bypass SQL Injection Vulnerability =============================================================...
Simple Customer 1.3 - Arbitrary Change Admin Password
Simple Customer 1.3 - Arbitrary Change Admin Password ---- Remote Change admin Password---- ---------------------------- script:Simple Customer 1.3 ---------------------------- Author: ahmadbady email:[email protected] -------------------- download from:http://www.simplecustomer.com/ New...
Simple Customer 1.3 - Arbitrary Change Admin Password
---- Remote Change admin Password---- ---------------------------- script:Simple Customer 1.3 ---------------------------- Author: ahmadbady email:[email protected] -------------------- download from:http://www.simplecustomer.com/ New Version 1.3 -------------------- xpl: coded by ahmadbady...
Simple Customer 1.3 Arbitrary Change Admin Password Exploit
Exploit for unknown platform in category web applications =========================================================== Simple Customer 1.3 Arbitrary Change Admin Password Exploit =========================================================== ---- Remote Change admin Password----...
Bright Cove User Macro-Cross-site script
Our e-security found the following error after they scanned the Bright Cove User Macro: Number System/Location Defect Type Status R4 Bright Cove User Macro Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies,...
Bright Cove User Macro-Cross-site script
Our e-security found the following error after they scanned the Bright Cove User Macro: Number System/Location Defect Type Status R4 Bright Cove User Macro Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies,...
Cache Plugin -Cross-site script error
Our e-security department found the error below after scanning the Cache Plugin: Number System/Location Defect Type Status R3 Cache Plugin Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies, which may be use...
Cache Plugin -Cross-site script error
Our e-security department found the error below after scanning the Cache Plugin: Number System/Location Defect Type Status R3 Cache Plugin Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies, which may be use...
Reporting Plugin- Cross-site scripting error
Our e-security found the following error for the Reporting plugin: Number System/Location Defect Type Status R2 Reporting Plugin Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies, which may be used to...
Reporting Plugin- Cross-site scripting error
Our e-security found the following error for the Reporting plugin: Number System/Location Defect Type Status R2 Reporting Plugin Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies, which may be used to...
Employee stole data from Sprint
Sprint has sent letters to thousands of its customers informing them that a former employee compromised their personal account data over the course of two months in 2008 and 2009. Brian Krebs Security Fix says that the company mailed warnings to several thousand customers and that the breach coul...
CVE-2008-6332
SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...
