16 matches found
EUVD-2008-4680
Malware in sbrugna...
EUVD-2008-4681
Malware in sbrugna...
Libera CMS <= 1.12 (Cookie) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl ---------------------------------------------------------- Libera CMS = 1.12 Cookie Remote SQL Injection Exploit Perl Exploit - Add a new admin with your credentials! Author: StAkeR - StAkeRathotmaildotit...
CVE-2008-4701
SQL injection vulnerability in admin.php in Libera CMS 1.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffuser cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details...
Sql injection
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...
Sql injection
SQL injection vulnerability in admin.php in Libera CMS 1.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffuser cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details...
CVE-2008-4700
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...
CVE-2008-4700
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...
CVE-2008-4701
SQL injection vulnerability in admin.php in Libera CMS 1.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffuser cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details...
CVE-2008-4700
CVE-2008-4700 affects Libera CMS 1.12 and earlier. The vulnerable component is admin.php where, if magic_quotes_gpc is disabled, an attacker can inject SQL via the libera_staff_pass cookie parameter, enabling remote arbitrary SQL execution. The connected records also mention a separate vector for...
CVE-2008-4701
CVE-2008-4701 describes a SQL injection in Libera CMS 1.12 under the condition that magic_quotes_gpc is disabled. The vulnerable element is the libera_staff_user cookie parameter, representing a different attack vector than CVE-2008-4700. The connected documents provide the same product/version c...
Libera CMS <= 1.12 (Cookie) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== Libera CMS agent"Mozilla/4.5 en Win95; U"; $https-timeout1; $https-defaultheader'Cookie' = "liberastaffpass=' or '1=1"; $request =...
Libera CMS 1.12 - cookie SQL Injection
Libera CMS 1.12 - cookie SQL Injection !/usr/bin/perl ---------------------------------------------------------- Libera CMS agent"Mozilla/4.5 en Win95; U"; $https-timeout1; $https-defaultheader'Cookie' = "liberastaffpass=' or '1=1"; $request =...
Libera CMS 1.12 - 'cookie' SQL Injection
!/usr/bin/perl ---------------------------------------------------------- Libera CMS agent"Mozilla/4.5 en Win95; U"; $https-timeout1; $https-defaultheader'Cookie' = "liberastaffpass=' or '1=1"; $request = $https-post$hostname."/admin.php?action=adduserprocess", username = $username, password =...
libera-sql.txt
--==+============================================================================+==-- --==+ Libera CMS = 1.12 Remote SQL Injection Exploit Cookie +==-- --==+============================================================================+==-- Discovered By: StAkeR [email protected] + Discovered On: ...
Libera CMS <= 1.12 (Cookie) Remote SQL Injection Exploit
No description provided by source. --==+============================================================================+==-- --==+ Libera CMS = 1.12 Remote SQL Injection Exploit Cookie +==-- --==+============================================================================+==-- Discovered By: StAkeR...