2989 matches found
CVE-2009-0711
Summary: CVE-2009-0711 affects PHPFootball 1.6 and earlier via filter.php , enabling remote attackers to obtain password hashes by a crafted request using an Accounts value for the dbtable parameter and a Password value for the dbfield parameter. The underlying issue is improper handling of user-...
TYPO3 File Disclosure
!/usr/bin/env python ------------------------------------------------------------------------------ TYPO3-SA-2009-002 exploit by Lolek of TK53 date: 2009/02/10 vendor url: http://typo3.org vulnerable versions: TYPO3 defaults to typo3conf/localconf.php if people fixed their installations but did n...
TYPO3 < 4.0.12/4.1.10/4.2.6 - 'jumpUrl' Remote File Disclosure
!/usr/bin/env python ------------------------------------------------------------------------------ TYPO3-SA-2009-002 exploit by Lolek of TK53 date: 2009/02/10 vendor url: http://typo3.org vulnerable versions: TYPO3 defaults to typo3conf/localconf.php if people fixed their installations but did n...
CVE-2009-0250
Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password...
RCBlog v1.03 Authentication Bypass Vulnerability
Exploit for unknown platform in category web applications ================================================ RCBlog v1.03 Authentication Bypass Vulnerability ================================================ Vendor: http://noahmedling.com Versions: RCBlog 1.03 May also affect earlier versions Credit...
RCBlog 1.03 - Authentication Bypass
RCBlog 1.03 - Authentication Bypass Vendor: http://noahmedling.com Versions: RCBlog 1.03 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=4 ---- By default, the application provides public access to the text fil...
RCBlog v1.03 Authentication Bypass Vulnerability
No description provided by source. Vendor: http://noahmedling.com Versions: RCBlog 1.03 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=4 ---- By default, the application provides public access to the text file...
RCBlog 1.03 - Authentication Bypass
Vendor: http://noahmedling.com Versions: RCBlog 1.03 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=4 ---- By default, the application provides public access to the text file which stores the MD5 hashes of the...
Cain & Abel 4.9.25 (Cisco IOS-MD5) Local Buffer Overflow Exploit
No description provided by source. !perl -w Simple overflow for Cain & Abel v4.9.25 and below? This script will output a file; import this file as a config file under Cracker - Cisco IOS-MD5 Hashes If Cain crashes but calc.exe isn't run, change $eip to reflect your system. send9 /at/ chiseclabs.c...
Improper access control
myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt...
CVE-2008-5855
myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt...
CVE-2008-5855
myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt...
RiotPix 0.61 - 'forumid' Blind SQL Injection
\n\n", $argv0; exit; list$sploit, $target, $username, $topicid = $argv; $charsArr = array48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 97, 98, 99, 100, 101, 102; $pos = 1; echo " Password Hash : "; while$pos != 33 for$i = 0; $i = count$charsArr; $i++ $query =...
CVE-2008-4905
Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack...
Hardcoded credentials
Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack...
PT-2008-6083 · Typo · Typo
Name of the Vulnerable Software and Affected Versions: Typo versions 5.1.3 and earlier Description: The issue allows attackers to more easily guess passwords via a brute force attack because it uses a hard-coded salt for calculating password hashes. Recommendations: For Typo versions 5.1.3 and...
CVE-2008-4905
CVE-2008-4905 affects Typo (versions 5.1.3 and earlier) and is caused by a hard-coded salt used to hash passwords. This weakens brute-force resistance, making password guessing easier for attackers. Connected sources (NVD, UBUNTU, CVE listings) confirm the condition, but none provide a concrete f...
CVE-2008-4905
Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack...
CMME Multiple Information disclosure vulnerabilities
WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CMME Multiple Information disclosure vulnerabilities Vendor: http://cmme.oesterholt.net Bug: Information Disclosure Vulnerable Version: 1.19 prior versions also may be affected Exploitation: Remote with browser Exploi...
CVE-2008-3924
The "Make a backup" functionality in Content Management Made Easy CMME 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover 1 account names and 2 password hashes via a direct request for a backup/cmmedata.zip or b...