Lucene search
+L

7679 matches found

Exploit DB
Exploit DB
added 2009/05/27 12:00 a.m.47 views

Easy Px 41 CMS 09.00.00B1 - 'fiche' Local File Inclusion

Easy Px 41 CMS v09.00.00B1 fiche Local File Include Exploit D.Script: http://www.easy-script.com/scripts-dl/EPX41v9.zip Discovered by: ThE g0bL!N Greetz To: ALL My Friend dz Exploit: /path/?view=LivreDor&fiche=../../../../../../../../etc/passwd%00 Demo...

7.5CVSS5.8AI score0.02347EPSS
SaveExploits2
exploitpack
exploitpack
added 2009/05/27 12:00 a.m.26 views

Easy Px 41 CMS 09.00.00B1 - fiche Local File Inclusion

Easy Px 41 CMS 09.00.00B1 - fiche Local File Inclusion Easy Px 41 CMS v09.00.00B1 fiche Local File Include Exploit D.Script: http://www.easy-script.com/scripts-dl/EPX41v9.zip Discovered by: ThE g0bL!N Greetz To: ALL My Friend dz Exploit:...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/05/27 12:00 a.m.27 views

MyForum 1.3 SQL Injection

MyForum 1.3 Auth Bypass Remote SQL Injection + Discovered By : ThE g0bL!N + Greetz : All my freind + Note: Tested On localhost : + http://www.easy-script.com/scripts-dl/myforumv1.3.zip Exploit: ------- Username: realadminname Password:' or '1=1 Or Username: realadminname' or '1=1 Password:ThE...

0.5AI score
SaveExploits0
exploitpack
exploitpack
added 2009/05/26 12:00 a.m.14 views

MyForum 1.3 - Authentication Bypass

MyForum 1.3 - Authentication Bypass + MyForum 1.3 Auth Bypass Remote SQL Injection + Discovered By : ThE g0bL!N + Greetz : All my freind + Note: Tested On localhost : + http://www.easy-script.com/scripts-dl/myforumv1.3.zip Exploit: ------- Username: realadminname Password:' or '1=1 Or Username:...

0.9AI score
SaveExploits0
zdt
zdt
added 2009/05/26 12:00 a.m.22 views

MyForum 1.3 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ MyForum 1.3 Auth Bypass Remote SQL Injection Vulnerability ============================================================ + MyForum 1.3 Auth Bypass Remote SQL Injection + Discovere...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2009/05/22 12:00 a.m.28 views

HP Remote Graphics Software unauthorized access

Unauthorized access with Easy Login option enabled...

3.4AI score
SaveExploits0References1
securityvulns
securityvulns
added 2009/05/22 12:00 a.m.96 views

HPSBMA02427 SSRT090069 rev.1 - HP Remote Graphics Software (RGS) Sender Running Easy Login, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01731970 Version: 1 HPSBMA02427 SSRT090069 rev.1 - HP Remote Graphics Software RGS Sender Running Easy Login, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should b...

10CVSS0.4AI score0.09912EPSS
SaveExploits0
Prion
Prion
added 2009/05/18 6:30 p.m.21 views

Code injection

Unspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software RGS 4.0.0 through 5.2.4 allows remote attackers to execute arbitrary code via unknown vectors...

10CVSS8.2AI score0.09912EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2009/05/18 6:00 p.m.47 views

CVE-2009-0721

Unspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software RGS 4.0.0 through 5.2.4 allows remote attackers to execute arbitrary code via unknown vectors...

7.7AI score0.09912EPSS
SaveExploits0References6
CVE
CVE
added 2009/05/18 6:00 p.m.60 views

CVE-2009-0721

CVE-2009-0721 affects HP Remote Graphics Software (RGS) Sender with Easy Login, v4.0.0–v5.2.4. An unspecified vulnerability in Easy Login allows remote code execution by an attacker over the network. HP’s Security Bulletin HPSBMA02427 rev.1 documents a fix: update to RGS v5.2.5 or later, or disab...

10CVSS7.9AI score0.09912EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2009/05/18 12:00 p.m.21 views

CVE-2009-1663

Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/username directory...

6.8CVSS7.7AI score0.02852EPSS
SaveExploits1References1
NVD
NVD
added 2009/05/18 12:00 p.m.28 views

CVE-2009-1664

myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modified userid, txtpassword, and txtRpassword parameters...

7.5CVSS7AI score0.02046EPSS
SaveExploits1References1
Prion
Prion
added 2009/05/18 12:00 p.m.22 views

Unrestricted file upload

Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/username directory...

6.8CVSS8.3AI score0.02852EPSS
SaveExploits1References1
Prion
Prion
added 2009/05/18 12:00 p.m.19 views

Code injection

myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a modified userid parameter without specifying any additional fields...

6.4CVSS7.3AI score0.02329EPSS
SaveExploits1References3
CVE
CVE
added 2009/05/17 4:00 p.m.60 views

CVE-2009-1664

The CVE-2009-1664 entry documents a vulnerability in myaccount.php of Easy Scripts Answer and Question Script where the application does not verify the original password before allowing password changes. This permits an attacker to modify userid, txtpassword, and txtRpassword parameters to change...

7.5CVSS7.2AI score0.02046EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2009/05/17 4:00 p.m.37 views

CVE-2009-1664

myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modified userid, txtpassword, and txtRpassword parameters...

7AI score0.02046EPSS
SaveExploits1References1
CVE
CVE
added 2009/05/17 4:00 p.m.51 views

CVE-2009-1665

CVE-2009-1665 affects myaccount.php in Easy Scripts Answer and Question Script. The issue allows remote attackers to remove arbitrary user accounts by modifying the userid parameter without supplying additional fields. This indicates an input manipulation vulnerability in the account-management l...

6.4CVSS7AI score0.02329EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2009/05/17 4:00 p.m.59 views

CVE-2009-1663

The CVE-2009-1663 detail describes an unrestricted file upload in Easy Scripts Answer and Question Script (myaccount.php). An attacker can upload a file with an executable extension to the uploads/[username] directory and access it directly to execute arbitrary code remotely. No remediation, patc...

6.8CVSS7.9AI score0.02852EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2009/05/17 4:00 p.m.36 views

CVE-2009-1665

myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a modified userid parameter without specifying any additional fields...

6.8AI score0.02329EPSS
SaveExploits1References3
NVD
NVD
added 2009/05/16 6:30 p.m.28 views

CVE-2009-1654

Cross-site scripting XSS vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote attackers to inject arbitrary web script or HTML via the questionid parameter...

4.3CVSS5.7AI score0.01484EPSS
SaveExploits2References4
Rows per page
Query Builder