CVE-2008-5642

Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. dot dot in a cmslanguage cookie...

CVE-2008-5648: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in DeltaScripts PHP Shop 1.0 allows remote attackers to execute arbitrary SQL commands via the adminusername parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5642: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. dot dot in a cmslanguage cookie...

The Rat CMS Alpha 2 - Authentication Bypass

The Rat CMS Alpha 2 - Authentication Bypass --------------------------------- The Rat Cms Auth By Pass --------------------------------- Autore: x0r Email: [email protected] -------------------------------- Bug In: \login.php $sql = "SELECT userid FROM tblauthuser WHERE userid = '$userId' AND...

The Rat CMS Alpha 2 - Authentication Bypass

--------------------------------- The Rat Cms Auth By Pass --------------------------------- Autore: x0r Email: [email protected] -------------------------------- Bug In: \login.php $sql = "SELECT userid FROM tblauthuser WHERE userid = '$userId' AND userpassword = PASSWORD'$password'"; $result...

phpAddEdit 1.3 Login Bypass

------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Set admin cookie so favorite form field will sho...

CVE-2008-5433

Cross-site scripting XSS vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the password field...

CVE-2008-5433: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the password field...

PhpAddEdit 1.3 - cookie Authentication Bypass

PhpAddEdit 1.3 - cookie Authentication Bypass ------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Se...

PhpAddEdit 1.3 (Cookie) Login Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================== PhpAddEdit 1.3 Cookie Login Bypass Vulnerability ================================================== ------------------------------------- PhpAddEdit 1.3 Login By Pass...

CVE-2008-5418

CVE-2008-5418 affects PunPortal module for PunBB (before version 2.0). The vulnerability is a directory traversal in login.php that allows remote attackers to include and execute arbitrary local files by manipulating pun_user[language] with .. (dot dot). This is a root-cause issue in file inclusi...

CVE-2008-5418

Directory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to include and execute arbitrary local files via a .. dot dot in the punuserlanguage parameter...

CVE-2008-5418: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to include and execute arbitrary local files via a .. dot dot in the punuserlanguage parameter...

CMS Made Simple admin/login.php cms_language Cookie Local File Inclusion

The remote host is running CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to sanitize user-supplied input to the 'cmslanguage' cookie when passed to the 'admin/login.php' script before using it to include PHP code...

PunBB Mod PunPortal 0.1 Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl =about PunBB PunPortal 0.1 Local File Inclusion Exploit -------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/download.php?id=1108 download cms http://punbb.org register globals = 1...

PunBB Mod PunPortal 0.1 - Local File Inclusion

PunBB Mod PunPortal 0.1 - Local File Inclusion !/usr/bin/perl =about PunBB PunPortal 0.1 Local File Inclusion Exploit -------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/download.php?id=1108 download cms http://punbb.org register...

TR News 2.1 - login.php Remote Authentication Bypass

TR News 2.1 - login.php Remote Authentication Bypass ?php errorreporting0; / ------------------------------------------------------ TR News = 2.1 login.php Remote Login ByPass Exploit ------------------------------------------------------ By StAkeRathotmaildotit...

TR News <= 2.1 (login.php) Remote Login Bypass Exploit

No description provided by source. ?php errorreporting0; / ------------------------------------------------------ TR News = 2.1 login.php Remote Login ByPass Exploit ------------------------------------------------------ By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/trscript-21.zi...

TR News 2.1 - 'login.php' Remote Authentication Bypass

?php errorreporting0; / ------------------------------------------------------ TR News = 2.1 login.php Remote Login ByPass Exploit ------------------------------------------------------ By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/trscript-21.zip File admin/login.php 1. ? 2...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 password and 2 username parameters...