CVE-2008-5784

CVE-2008-5784 affects V3 Chat – Profiles/Dating Script 3.0.2. The root cause is an authentication bypass: setting the admin cookie to 1 grants remote attackers administrative access. Impact is described as remote authentication bypass with full admin privileges (per the sources). There is no expl...

CVE-2008-5785: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2008-5784: Reliance on Cookies without Validation and Integrity Checking

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln

No description provided by source. + V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = "admin=1; path=/";...

V3 Chat Profiles/Dating Script 3.0.2 (Auth Bypass) SQL Injection Vuln

No description provided by source. V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability ----------------------------------------------------------------- Discovered By: d3b4g contact: bl4ckendatgmaildotcom Risk: High -------------------------------------------------------------------...

v3chatprofiles-insecure.txt

V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = "admin=1; path=/";...

V3 Chat ProfilesDating Script 3.0.2 - Insecure Cookie Handling

V3 Chat ProfilesDating Script 3.0.2 - Insecure Cookie Handling + V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = "admin=1; path=/"; milw0rm.com 2008-11-08...

V3 Chat ProfilesDating Script 3.0.2 - Authentication Bypass

V3 Chat ProfilesDating Script 3.0.2 - Authentication Bypass V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability ----------------------------------------------------------------- Discovered By: d3b4g contact: bl4ckendatgmaildotcom Risk: High...

V3 Chat Profiles/Dating Script 3.0.2 - Authentication Bypass

V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability ----------------------------------------------------------------- Discovered By: d3b4g contact: bl4ckendatgmaildotcom Risk: High --------------------------------------------------------------------- Exploit: USe this information to...

V3 Chat Profiles/Dating Script 3.0.2 - Insecure Cookie Handling

V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = "admin=1; path=/"; milw0rm.com 2008-11-08...

My PHP Dating (success_story.php id) SQL Injection Vulnerability

No description provided by source. | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Sq1 inj3ct1on script : PHP MY DATING see script...

myphpdating-sql.txt

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Sq1 inj3ct1on script : PHP MY DATING see script http://www.phponlinedatingsoftware.com/demo.htm Greetz : Allah , Egyptian x...

My PHP Dating - id SQL Injection

My PHP Dating - id SQL Injection | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Sq1 inj3ct1on script : PHP MY DATING see script...

My PHP Dating (success_story.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ My PHP Dating successstory.php id SQL Injection Vulnerability ================================================================ Author : Hakxer Type Gap : Sq1 inj3ct1on script...

My PHP Dating - 'id' SQL Injection

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Sq1 inj3ct1on script : PHP MY DATING see script http://www.phponlinedatingsoftware.com/demo.htm Greetz : Allah , Egyptian x...

CVE-2008-4461

SQL injection vulnerability in advancedsearchresults.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter...

CVE-2008-4461

CVE-2008-4461 affects Vastal I-Tech Dating Zone (likely version 0.9.9). The vulnerability is an SQL injection in the advanced_search_results.php script allowing an attacker to manipulate the fage parameter to execute arbitrary SQL commands. This enables remote exploitation with potential impact o...

CVE-2008-4461: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in advancedsearchresults.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter...

Vastal I-Tech Dating Zone - fage SQL Injection

Vastal I-Tech Dating Zone - fage SQL Injection ZoRLu - - - yildirimordulari.org - - - z0rlu.blogspot.com Vastal I-Tech Dating Zone fage SQL Injection Vulnerability author: ZoRLu home: yildirimordulari.org - - - z0rlu.blogspot.com - - - r00tsecurity.org contact: [email protected] & [email protected]...

Vastal I-Tech Dating Zone (fage) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Vastal I-Tech Dating Zone fage SQL Injection Vulnerability ============================================================ Vastal I-Tech Dating Zone fage SQL Injection Vulnerability...