291 matches found
Idea Cellular Web Portal Hacked, Customers Info may be exposed !
Idea Cellular Web Portal Hacked, Customers Info may be exposed ! Again a critical SQL Injection Vulnerability has been discovered by zSecure Team in a high profile web portal. This time it's Ideacellular web portal which compromises the entire site database. Any malicious smart black hats can...
Sify.com hacked with SQL Injection Vulnerability
Sify.com hacked with SQL Injection Vulnerability Sify's website contain SQL injection Vulnerability and Hackers are able to Database Access, Database Dump, Possibility of shell uploading. Sify is one of India's leading integrated Information Communications Technology companies. Sify was one of th...
Indishell.net forum Hacked by Pakistan hackers
Indishell.net forum Hacked by Pakistan hackers Indian Hackers forum, Indishell.net has been hacked by Pakistani hackers. This is not that orginal Indishell hackers group of India. The domain is somewhere similar to them. Paki Hackers Provide More details here https://pastebin.com/k0XYZQCW .They...
Hacker getting WordPress Database Dump with Google Query !
Hacker getting WordPress Database Dump with Google Query ! There appear to be multiple WordPress powered sites that are performing an DB-XML dumb of the articles and subsequent pages. The comments section includes originating IP address, datetime, E-Mail address, homepage, etc. These entities are...
vBulletin 3.5.2 - Cross-Site Scripting
vBulletin 3.5.2 - Cross-Site Scripting Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 =============================================== WWW.sec-war.com =============================================== 3.5.2 - Introduction XS...
h2desk helpdesk path disclosure vulnerability
Heathco's h2desk helpdesk ticking system provides a ticketing solution for small and large organizations alike. Blah blah. On to the exploit. h2desk's session handling is custom and doesnt use the standard phpsession id handling. As a result, if you add a tic ' or any other invalid character to t...
[Full-disclosure] Papoo CMS 3.6 - Access Restriction Bypass
Papoo Content Management System Backend Access Restriction Bypass Jun 24 2007 Product Papoo Content Management System Vulnerable Versions Papoo 3.6 and maybe prior Vendor Status The Vendor was notified and the issue was fixed. A patch is available at...
CVE-2006-4578: Undefined Security Weakness
export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL database contents, which allows remote attackers to obtain sensitive information...
E107 v.6.17d vuln.
SQL Injection Существует из-за того, что не проверяется значение $order, преданное в POST-запросе к /user.php В случае, если: злоумышленник знает полный путь к каталогу, в котором размещен контент; magicquotesgpc=off; пользователь, с чьими правами идет обращение к БД имеет права Filepriv; то, он...
Aztek Forum <= 4.0 [myadmin.php] Database Dumper Exploit
Exploit for unknown platform in category web applications ======================================================== Aztek Forum include include include include include include include include include define REQ1 "/myadmin.php?action=exportindex&login=" define REQ2 " HTTP/1.1\nHost: " define REQ3...
Aztek Forum <= 4.0 [myadmin.php] Database Dumper Exploit
No description provided by source. / Changed line 81 - Tested and working /str0ke / / LOTFREE Team presents : Forum-Aztek v4.0 4nd pr0b4bly inf3ri0r Database Dump Xpl0it 0day dUd3 X- ./aztek-sploit 127.0.0.1 admin forum HTTP/1.1 200 OK Date: Sat, 05 Mar 2005 22:18:13 GMT Server: Apache/2.0.50...