157 matches found
Snare Agent for Linux < 1.7.0 / 2.0.0 Multiple Vulnerabilities
According to its self-reported version number, the installation of Snare Agent for Linux hosted on the remote web server is affected by multiple vulnerabilities in the optionally configured web interface: - The web interface discloses a hashed password for remote logins. An attacker can view the...
Lingxia I.C.E CMS - Blind SQL Injection
Lingxia I.C.E CMS - Blind SQL Injection !/usr/bin/python ICE CMS Blind SQLi 0day. mrme@pluto ice$ python icecold.py -p localhost:8080 -t 10.3.100.25:8500 -d /ice/ | ---------------------------------------------------- | | Lingxia I.C.E CMS Remote Blind SQL Injection Exploit | | by mrme -...
Triton CMS Pro 1.06 - 'x-forwarded-for' Blind SQL Injection
!/usr/bin/perl -w Triton CMS Pro X-Forwarded-For Blind SQL Injection Admin's username/hash disclosure exploit Benchmark method, so take a coffee and relax Coded by GiReX use LWP::UserAgent; use HTTP::Request; ifnot defined $ARGV0 print "\nUsage: perl $0 host path 1/2\n"; print "Example: perl $0...
Mambo Component mambads <= 1.0 RC1 Beta SQL Injection Vulnerability
No description provided by source. !/usr/bin/perl -w Mambo Component mambads 1.0 RC1 Beta & 1.0 RC1 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Greetz : Stack & CoNaN & HaCkeREgY & room-hacker & Hak3r-b0y & All friends & All muslims HaCkeRs :...
phpizabi-disclose.txt
-------------------------------------------------------- PHPizabi v0.848b C1 HFP3 database information exposure -------------------------------------------------------- I would like to state that I am in no way responsible for how this information is used. It is just that, information and is...
Mihalism Multi Host Download (Username) Blind SQL Injection Exploit
No description provided by source. ?php / Moubik Romanian Security Team - http://rstzone.org presents Mihalism Multi Host Download - Blind SQL Injection Attack Thanks to Vladii for telling me about the CMS. Thanks to Shocker for telling Vladii about the CMS. Shoutz to Kw3rln, Bankai, Slick,...
RunCMS Newbb_plus <= 0.92 Client IP Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ RunCMS Newbbplus "UnderWHAT?!" ; $mw-geometry '420x383' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'Newbbplus 'Taho...
WWWboard password disclosure
//A vulnerability found in WWWboard that shows the administrative user names and passwords. Althought the password is hashed, It can easily be decoded. //Effected versions: Version 2.0 ALPHA 2 //File name: passwd.txt //File location: http://victim/wwwboard/passwd.txt //Google dork:...
HyperBook Guestbook 1.3 - GBConfiguration.DAT Hashed Password Information Disclosure
HyperBook Guestbook 1.3 - GBConfiguration.DAT Hashed Password Information Disclosure source: https://www.securityfocus.com/bid/22754/info HyperBook Guestbook is prone to an information-disclosure vulnerability because the application fails to protect sensitive information. An attacker can exploit...
HyperBook Guestbook 1.3 - GBConfiguration.DAT Hashed Password Information Disclosure
source: https://www.securityfocus.com/bid/22754/info HyperBook Guestbook is prone to an information-disclosure vulnerability because the application fails to protect sensitive information. An attacker can exploit this issue to access sensitive information that may lead to other attacks. This issu...
CVE-2002-1909
Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password...
CVE-2002-1909
The CVE-2002-1909 entry documents that Click2Learn Ingenium Learning Management System (versions 5.1 and 6.1) stores the hashed administrative password in a config.txt file located under the htdocs directory, enabling remote attackers to obtain the admin password. The connected Red Hat advisory a...
wordpressSQL.txt
!/usr/bin/perl -w SQL Injection Exploit for WordPress .? .?/ && print "+ Username of administrator is: $1\n"; print "- Unable to retrieve username\n" if!$1; $page=get$ARGV0."index.php?cat=%2527%20UNION%20SELECT%20userpass%20FROM%20wpusers/" || die "- Unable to retrieve: $!"; $page=m/.? .?/ && pri...
arkeia.txt
During the testing of arkeia a few security holes has been discovered. Vulnerable System: Arkeia 4.2.x, 5.2.x and 5.3.x Details: 1. Writable directory $ ls -ld /opt/arkeia/server/dbase/ drwxrwxrwx 10 root root 4096 gru 27 13:40 /opt/arkeia/server/dbase/ 2. Default the "root" account password is s...
Arkeia Possible remote root & information leakage
During the testing of arkeia a few security holes has been discovered. Vulnerable System: Arkeia 4.2.x, 5.2.x and 5.3.x Details: 1. Writable directory $ ls -ld /opt/arkeia/server/dbase/ drwxrwxrwx 10 root root 4096 gru 27 13:40 /opt/arkeia/server/dbase/ 2. Default the "root" account password is s...
Another YabbSE SQL Injection
Summary YaBB SE is a PHP/MySQL port of the popular forum software YaBB yet another bulletin board. An SQL injection vulnerability allows a remote attacker to execute malicious SQL statements on the database remotely Details Vulnerable Systems: YaBB SE versions 1.5.4, 1.5.5, possibly others The fi...
x_news allows unauthorized users to access administrative menu
Overview xnews allows a user to authenticate without supplying the user's plaintext password. Description xnews is a system for managing news. When a user logs in to xnews version 1.1 using a plaintext password, xnews hashes the password with MD5 and compares it to user's hash stored in the file...