Basic PHP Events Lister 2 - Arbitrary Add Admin

--------------------------------------- Basic php-events lister2 ADD ADMIN Exploit .. --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : Powered by: mevin productions + Script : Basic php-events lister2 +...

Firefox form history vulnerable to stealing

Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries...

Microsoft Windows Media Runtime Voice Sampler Rate Code Execution (MS09-051; CVE-2009-0555; CVE-2009-2525)

A remote code execution vulnerability exists in the way that Microsoft Windows Media Runtime and the Windows Media Player handle specially crafted ASF files. The Microsoft Windows Media Format Runtime provides information and tools for applications that use Windows Media content. Windows Media...

Authentication flaw

Open Source Security Information Management OSSIM before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to 1 graphs/alarmsevents.php or 2 host/drawtree.php...

CVE-2009-3432

Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events...

Design/Logic Flaw

Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events...

CVE-2009-3432

Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events...

Code injection

Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and 6.2 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-2741

Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and 6.2 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-2741

Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and 6.2 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-2741

The CVE-2009-2741 entry concerns IBM WebSphere Business Events 6.1 and 6.2 with an unspecified vulnerability in the wberuntimeear application’s test servlet that allows remote code execution via unknown vectors. The public records do not disclose the exact vulnerable component, root cause, exploi...

Server side request forgery (ssrf)

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

CVE-2009-3168

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

CVE-2009-3168

CVE-2009-3168 affects Mevin Productions Basic PHP Events Lister 2.0. The vulnerability arises from improper access restriction to admin/reset.php and admin/user_add.php, allowing remote authenticated users to reset administrative passwords or add administrators via a direct request. Multiple conn...

CVE-2009-3168

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

CVE-2009-3168

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

PT-2009-5484 · Mevin Productions · Mevin Productions Basic Php Events Lister

Name of the Vulnerable Software and Affected Versions: Mevin Productions Basic PHP Events Lister version 2.0 Description: The issue concerns improper access restriction to certain PHP files, specifically admin/reset.php and admin/user add.php. This allows remote authenticated users to reset...

Basic PHP Events Lister 2 Reset Admin Pass/Add Admin Vulns

Exploit for unknown platform in category web applications ========================================================== Basic PHP Events Lister 2 Reset Admin Pass/Add Admin Vulns ========================================================== @ Basic PHP Events Lister 2 Reset Admin Pass\ Add Admin Vul @...

SEO-CMS 1.3 (body.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================== SEO-CMS 1.3 body.php Remote File Inclusion Vulnerability ========================================================== @ Basic PHP Events Lister 2 Reset Admin Pass\ Add Admin Vul @...

Ultimate Fade-in slideshow 1.51 Shell Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== Ultimate Fade-in slideshow 1.51 Shell Upload Vulnerability ========================================================== ================== NaMe: Ultimate Fade-in slideshow 1.51 = She...