33 matches found
Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit
No description provided by source. KAPDA - Security Science Researchers Institute Advisory : http://www.kapda.ir/advisory-337.html Vendor : http://www.nukedit.com/ What is : Nukedit is a Free Content Management Vulnerability : Unauthorized Admin Add Exploit if register.asp be enable! Discovered :...
Mambo <= 4.5.3 & Joomla <= 1.0.7 - (feed) Denial of Service Exploit
No description provided by source. ?php Mambo/Joomla Path Disclosure & Remote DOS Exploit by trueend5 Computer Security Science Researchers Institute http://www.KAPDA.ir errorreporting0; inisetmaxexecutiontime,0; inisetdefaultsockettimeout, 5; obimplicitflush 1; echo'html head meta...
[KAPDA]::Security analysis of cutenews 1.4.5
Product: cutenews 1.4.5 Vendor: http://cutephp.com The Results through security analysis of cutenews 1.4.5 provided by KAPDA.ir -------------------------------------------------- Test plan: Manual penetration testing: YES Using automated tools: NO Code Auditing: YES Statistical Results from...
Hosting Controller <= 6.1 Hotfix 3.2 Remote Unauthenticated Vulns
No description provided by source. Hosting Controller 6.1 Hotfix = 3.2 Multi Vuln. SQLInjection, Command Injection ------- KAPDA::59 - Hosting Controller 6.1 Hotfix = 3.2 Vendor: Hosting Controller Vendor URL: www.hostingcontroller.com Solution: Hotfix 3.3 Found Date: 7/1/2006 Release Date:...
Hosting Controller 6.1 Hotfix 3.2 - Access
Hosting Controller 6.1 Hotfix 3.2 - Access Hosting Controller 6.1 Hotfix = 3.2 Multi Vuln. SQLInjection, Command Injection ------- KAPDA::59 - Hosting Controller 6.1 Hotfix = 3.2 Vendor: Hosting Controller Vendor URL: www.hostingcontroller.com Solution: Hotfix 3.3 Found Date: 7/1/2006 Release Dat...
Hosting Controller 6.1 Hotfix 3.2 - Access
Hosting Controller 6.1 Hotfix = 3.2 Multi Vuln. SQLInjection, Command Injection ------- KAPDA::59 - Hosting Controller 6.1 Hotfix = 3.2 Vendor: Hosting Controller Vendor URL: www.hostingcontroller.com Solution: Hotfix 3.3 Found Date: 7/1/2006 Release Date: 10/10/2006 Discussion:...
[KAPDA::#61] - PacPoll <= 4.0 Multiple Vulnerabilities
KAPDA New advisory Vulnerable product : PacPoll = 4.0 Vendor: http://www.pacosdrivers.com/asp/poll/poll.asp Vulnerability: Admin Logon bypass , SQLInjection Date : -------------------- Found : 2006/10/10 Vendor Contacted : N/A Release Date : 2006/10/25 Vulnerabilities: -------------------- Admin...
kapda-56.txt
KAPDA New advisory Vendor: http://www.digiappz.com Vulnerability: SQLInjection Date : -------------------- Found : Aug 10, 2006 Vendor Contacted : N/A Release Date : Aug 30, 2006 About Freekot : -------------------- FREEKOT is a free tool which allows you to insert a random quotation system or a...
[KAPDA::#56] - FREEKOT SQL Injection Vulnerability
KAPDA New advisory Vendor: http://www.digiappz.com Vulnerability: SQLInjection Date : -------------------- Found : Aug 10, 2006 Vendor Contacted : N/A Release Date : Aug 30, 2006 About Freekot : -------------------- FREEKOT is a free tool which allows you to insert a random quotation system or a...
PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability
Exploit for unknown platform in category web applications =================================================================== PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability =================================================================== KAPDA::52 - PHP-Post 1.0 Cookie...
PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability
No description provided by source. KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23, 2005 Vendor Contacted:...
PHP-Post 1.0 - Cookie Modification Privilege Escalation
KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23, 2005 Vendor Contacted: Jun 01, 2006 Release Date: July 18...
PHP-Post 1.0 - Cookie Modification Privilege Escalation
PHP-Post 1.0 - Cookie Modification Privilege Escalation KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23,...
kapda-50.txt
KAPDA::50MyBB 1.1.4 Multiple Vuln SQLInjection & XSS ------- KAPDA New Advisory . http://www.kapda.ir/advisory-349.html ORIGINAL ADVISORY: http://myimei.com/security/2006-06-24/mybb...verwriting.html http://myimei.com/security/2006-06-22/mybb...in-url-tag.html -Summary- Software: MyBB Sowtwares W...
Nukedit 4.9.6 - Unauthorized Admin Add
Nukedit 4.9.6 - Unauthorized Admin Add KAPDA - Security Science Researchers Institute Advisory : http://www.kapda.ir/advisory-337.html Vendor : http://www.nukedit.com/ What is : Nukedit is a Free Content Management Vulnerability : Unauthorized Admin Add Exploit if "register.asp" be enable!...
Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit
Exploit for unknown platform in category web applications =================================================== Nukedit CMS Kapda HTML PoC For Nukedit Kapda HTML PoC For Nukedit Discovered and coded by 3nitro - farhadkey AT kapda dot ir Change the form's action in source :...
[KAPDA::#43] - phpwcms multiple vulnerabilities
Vendor: http://www.phpwcms.de Bugs: Path Disclosure, XSS, Local File Inclusion, Remote Code Execution Vulnerable Version: phpwcms 1.2.5-DEV prior versions also maybe affected Exploitation: Remote with browser Description: -------------------- phpwcms is a web content management system optimized f...
guppyDoS.txt
KAPDA New advisory Vendor: http://www.freeguppy.org Vulnerable: 0 && $tabcounter0/10 == intval$tabcounter0/10 WriteCounterDBSTATSBK, $tabcounter0; //functions.php function WriteCounter$fic,$Dat...
d2kBlog 1.0.3 (memName) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================== d2kBlog 1.0.3 memName Remote SQL Injection Exploit ==================================================== !/usr/bin/perl -w D2KBLOG SQL injection Discovered by : Farhad Koosha farhadkey at...
[KAPDA::#30] - CuteNews1.4.1 Cross_Site_Scripting Vulnerability
KAPDA::30 - CuteNews1.4.1 CrossSiteScripting Vulnerability KAPDA New advisory Vulnerable products : CuteNews1.4.1 Vendor: www.cutephp.com Risk: Low Vulnerabilities: CrossSiteScripting Discoverd by Roozbeh Afrasiabi and imei addmimistrator roozbehafrasiabiatyahoodotcom www.kapda.ir www.persiax.com...