SoftBB 0.1 - 'mail' Blind SQL Injection

!/usr/bin/env python LOTFREE TEAM 03/2006 http://lotfree.next-touch.com/ http://membres.lycos.fr/lotfree/sploits/LOTF-SoftBB.py Vulnerability info Product : SoftBB Version : 0.1 The field 'mail' in reg.php is used directly in a SQL query : $sql = 'SELECT pseudo,mail FROM '.$prefixtable.'membres...

SoftBB 0.1 - mail Blind SQL Injection

SoftBB 0.1 - mail Blind SQL Injection !/usr/bin/env python LOTFREE TEAM 03/2006 http://lotfree.next-touch.com/ http://membres.lycos.fr/lotfree/sploits/LOTF-SoftBB.py Vulnerability info Product : SoftBB Version : 0.1 The field 'mail' in reg.php is used directly in a SQL query : $sql = 'SELECT...

To cope with the MD5 password method Raiders-vulnerability warning-the black bar safety net

...

SoftBB 0.1 (mail) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/env python LOTFREE TEAM 03/2006 http://lotfree.next-touch.com/ http://membres.lycos.fr/lotfree/sploits/LOTF-SoftBB.py Vulnerability info Product : SoftBB Version : 0.1 The field 'mail' in reg.php is used directly in a SQL query : $sql = 'SELECT...

Nodez <= 4.6.1.1 Mercury Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Nodez = 4.6.1.1 Mercury Multiple Remote Vulnerabilities ======================================================== !/usr/bin/php -q -d shortopentag=on ? echo "Nodez 4.6.1.1 Mercury...

CVE-2006-1085

admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privileges, and execute arbitrary PHP code by modifying the optionadminpass parameter and setting the passcookie to the MD5 hash of the specified password...

phpBB 2.0.19 - Style Changer/Demo Mod SQL Injection

!/usr/bin/perl | | | \ | | |/ phpBB Style Changer/Demo Mod--GET HASH EXPLOIT Created By SkOd SED security Team http://www.sed-team.be [email protected] ISRAEL google: "Powered by phpBB" inurl:"index.php?s" OR inurl:"index.php?style" use IO::Socket; if @ARGV 3 print q phpBB Style Changer\Viewer MO...

MD5 decrypt of the most fast method-vulnerability warning-the black bar safety net

In the I do section management of several forums, whether it is a Black Hawk base in the forum or a non-secure or is the X-Files, always repeat the experience on MD5 hack question post, answer more is really tired, do a rough summary, and then later Refine it. In General, shaped like a...

CVE-2006-0440

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

Authentication flaw

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

CVE-2006-0440

Text Rider 2.4 is affected by an authentication-bypass vulnerability: an attacker can obtain the MD5 hash of the password (potentially from another vulnerability that reads it from a data file) and include the hash in a cookie to bypass login and upload files without a valid password. The descrip...

CVE-2006-0440

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

Session fixation

claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...

Improper access control

Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes...

CVE-2006-0370

Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes...

CVE-2006-0370

Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes...

Ubuntu 4.10 / 5.04 : openssl weak default configuration (USN-179-1)

The current default algorithm for creating 'message digests' electronic signatures for certificates created by openssl is MD5. However, this algorithm is not deemed secure any more, and some practical attacks have been demonstrated which could allow an attacker to forge certificates with a valid...

Using the MD5 transform algorithm to the anti-exhaustive(collision)to decipher a password-vulnerability warning-the black bar safety net

MD5 in Web applications in the most commonly used password encryption algorithm. Since MD5 is irreversible, and thus through the MD5 calculated after the ciphertext, not through the reverse algorithm to get the original. Review in Web applications to use the MD5 encrypted text of the password of...

Dev Web Management System 1.5 - 'cat' SQL Injection

this works regardless of magicquotesgpc setting usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Prohibit the taking of omens, and do away with superstitious doubts. Then, until death itself comes, no calamity need be feared." errorreporting0; iniset"maxexecutiontime",0;...

Dev Web Management System 1.5 - cat SQL Injection

Dev Web Management System 1.5 - cat SQL Injection this works regardless of magicquotesgpc setting usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Prohibit the taking of omens, and do away with superstitious doubts. Then, until death itself comes, no calamity need be feared...