CVE-2005-2192

CVE-2005-2192 affects SimplePHPBlog 0.4.0 where password hashes are stored in config/password.txt with insufficient access control. This weak file permissions could allow remote attackers to read password hashes and perform brute force attacks to obtain passwords, impacting confidentiality. The a...

CVE-2005-2192

SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote attackers to obtain passwords via a brute force attack...

PT-2005-3068 · Raritan · Raritan Dominion Sx

Name of the Vulnerable Software and Affected Versions: Raritan Dominion SX DSX Console Servers versions DSX16, DSX32, DSX4, DSX8, and DSXA-48 Description: The issue allows local users to obtain hashed passwords or execute arbitrary code as other users due to world-readable permissions for...

invision.php.txt

?php / = 2.0.3 = 1.3.1 Final /str0ke / $server = "SERVER"; $port = 80; $file = "PATH"; $target = 81; / User id and password used to fake-logon are not important. '10' is a random number. / $id = 10; $pass = ""; $hex = "0123456789abcdef"; for$i = 1; $i = 32; $i++ $idx = 0; $found = false; while...

xpl_detail.pl.txt

This is a multi-part message in MIME format. ------=NextPart000003201C5473D.B3E3E000 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable http://icis.digitalparadox.org/exploits/xpldetail.pl =20 !/usr/bin/perl use IO::Socket; use Getopt::Std; print "xASP NUKE...

CVE-2005-1220

The CVE-2005-1220 entry describes an information-disclosure vulnerability in Shoutbox SCRIPT 3.0.2 and earlier. An attacker could trigger a direct request to db/settings.dat to obtain usernames and password hashes, indicating a partial confidentiality impact. The connected documents confirm the a...

PHP-Nuke 6.x 7.6 Top module - SQL Injection

PHP-Nuke 6.x 7.6 Top module - SQL Injection /bin/bash This is just basic-ly modules.php?name=Top&querylang=union%20select%200,pwd,0,0%20from%20nukeauthors%20where%20radminsuper=1 works thou /str0ke PHPNuke Top Module Remote SQL Injection by Fabrizi Andrea 2005 andrea.fabrizi at gmail.com Work wit...

PHP-Nuke 6.x - 7.6 Top module Remote Sql Injection Exploit (working)

Exploit for unknown platform in category web applications ==================================================================== PHP-Nuke 6.x - 7.6 Top module Remote Sql Injection Exploit working ==================================================================== /bin/bash This is just basic-ly...

DEBIAN-CVE-2004-2705

Unspecified vulnerability in Player vs. Player Gaming Network PvPGN before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets...

Hydra: IMAP

This plugin runs Hydra to find IMAP accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

SAFE TEAM Regulus 2.2 - Staffile Information Disclosure

SAFE TEAM Regulus 2.2 - Staffile Information Disclosure source: https://www.securityfocus.com/bid/11132/info SAFE TEAM Regulus is reported prone to an information disclosure vulnerability. It is reported that any user may make a request for the Regulus 'staffile' file hosted on a target server...

SAFE TEAM Regulus 2.2 - Staffile Information Disclosure

source: https://www.securityfocus.com/bid/11132/info SAFE TEAM Regulus is reported prone to an information disclosure vulnerability. It is reported that any user may make a request for the Regulus 'staffile' file hosted on a target server. This file contains a list of Regulus 'staff' users and...

PHP-Fusion Database Backup - Information Disclosure

PHP-Fusion Database Backup - Information Disclosure source: https://www.securityfocus.com/bid/10974/info It is reported that PHP-Fusion is susceptible to a database backup information disclosure vulnerability. An anonymous remote attacker may be able to download a complete database backup from th...

phpBB 2.06 search.php SQL injection

Hello bugtraq readers, A vulnerability exists in phpBB 2.06 that could allow an attacker to manipulate SQL queries and gain administrative control over the forum. The search.php script of the application does not sufficiently sanitize the input of the "searchid" parameter. As a result of this an...

4D WebSTAR FTP Server Suite - Remote Buffer Overflow

4D WebSTAR FTP Server Suite - Remote Buffer Overflow / Remote Vulnerability in 4D WebSTAR Server Suite - Exploit ================================================ Date: 11.09.2003 Author: B-r00t. 2003. Email: B-r00t blueyonder.co.uk Reference: http://www.4d.com/products/webstar.html Versions: 4D...

4D WebSTAR FTP Server Suite Remote Buffer Overflow Exploit

No description provided by source. / Remote Vulnerability in 4D WebSTAR Server Suite - Exploit ================================================ Date: 11.09.2003 Author: B-r00t. 2003. Email: B-r00t blueyonder.co.uk Reference: http://www.4d.com/products/webstar.html Versions: 4D WebSTAR 5.3.1 Lates...

4D WebSTAR FTP Server Suite Remote Buffer Overflow Exploit

Exploit for macOS platform in category remote exploits ========================================================== 4D WebSTAR FTP Server Suite Remote Buffer Overflow Exploit ========================================================== / Remote Vulnerability in 4D WebSTAR Server Suite - Exploit...

4D WebSTAR FTP Server Suite - Remote Buffer Overflow

/ Remote Vulnerability in 4D WebSTAR Server Suite - Exploit ================================================ Date: 11.09.2003 Author: B-r00t. 2003. Email: B-r00t blueyonder.co.uk Reference: http://www.4d.com/products/webstar.html Versions: 4D WebSTAR 5.3.1 Latest = VULNERABLE. Tested: 4D WebSTAR...

PHP-Gastebuch 1.60 - Information Disclosure

PHP-Gastebuch 1.60 - Information Disclosure source: https://www.securityfocus.com/bid/8270/info PHP-Gastebuch has been reported prone to multiple information disclosure vulnerabilities. The issue presents itself because the affected software fails to sufficiently control access to sensitive files...

e107 db.php User Database Disclosure

The version of e107 installed on the remote host is affected by an information disclosure vulnerability because of a flaw in the 'admin/db.php' script. This can allow an unauthenticated, remote attacker to obtain a dump of the SQL database used by e107, by sending a specially crafted request. An...