EUVD-2008-6434

Malware in sbrugna...

Mevin Basic PHP Events Lister 2.03 - CSRF Vulnerabilities

No description provided by source. Author: CrazyHacker Script: Mevin Basic PHP Events Lister v2.03 Exploit type: CSRF Vulnerability Add & Delete Admin Download: http://www.mevin.com/downloads/Basic-php-events-lister2.03.zip Risk: High Contact: [email protected] form name=setup...

Basic PHP Events Lister 1.0 - Remote SQL Injection Vulnerability

No description provided by source. / \ /\ /\ / \ / \ | | | | \ / / ||| | | | | | | | | | \ / \ | | | | | | || | / \ \ | | || | / / /\ \ |/ / / / Basic PHP Events Lister Remote SQL Injection Author: 0x90 HomePage: www.0x90.com.ar Contact: Gunsat0x90dotcomdotar Script: Basic PHP Events Lister...

Mevin Productions SQL Injection

Exploit Title: mevin productions Sql Injection Vulnerability Date: 30/10/2011 - 23:00 Author: 3spi0n Software Website: http://www.mevin.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Event.php $ Dorks: "Powered by: mevin productions" inurl:/event.php?id= $ Demo Sites...

Mevin Basic PHP Events Lister v2.03 CSRF Vulnerabilities

Exploit for php platform in category web applications Author: CrazyHacker Script: Mevin Basic PHP Events Lister v2.03 Exploit type: CSRF Vulnerability Add & Delete Admin Download: http://www.mevin.com/downloads/Basic-php-events-lister2.03.zip Risk: High Contact: email protected \// S3crity just...

Mevin Basic PHP Events Lister 2.03 - Cross-Site Request Forgery

Mevin Basic PHP Events Lister 2.03 - Cross-Site Request Forgery Author: CrazyHacker Script: Mevin Basic PHP Events Lister v2.03 Exploit type: CSRF Vulnerability Add & Delete Admin Download: http://www.mevin.com/downloads/Basic-php-events-lister2.03.zip Risk: High Contact: [email protected] \//...

Mevin Basic PHP Events Lister 2.03 Cross Site Request Forgery

Author: CrazyHacker Script: Mevin Basic PHP Events Lister v2.03 Exploit type: CSRF Vulnerability Add & Delete Admin Download: http://www.mevin.com/downloads/Basic-php-events-lister2.03.zip Risk: High Contact: [email protected] \// S3crity just Suck5 \// EOF...

Mevin Basic PHP Events Lister 2.03 - Cross-Site Request Forgery

Author: CrazyHacker Script: Mevin Basic PHP Events Lister v2.03 Exploit type: CSRF Vulnerability Add & Delete Admin Download: http://www.mevin.com/downloads/Basic-php-events-lister2.03.zip Risk: High Contact: [email protected] \// S3crity just Suck5 \// EOF...

Basic PHP Events Lister 2 Add Administrator

--------------------------------------- Basic php-events lister2 ADD ADMIN Exploit .. --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : Powered by: mevin productions + Script : Basic php-events lister2 +...

Server side request forgery (ssrf)

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

CVE-2009-3168

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

CVE-2009-3168

Mevin Productions Basic PHP Events Lister 2.0 is vulnerable to an access control flaw where it fails to properly restrict access to the admin/reset.php and admin/user_add.php files. This security deficiency allows remote authenticated users to perform unauthorized actions, such as resetting admin...

CVE-2009-3168

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

CVE-2009-3168

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

PT-2009-5484 · Mevin Productions · Mevin Productions Basic Php Events Lister

Name of the Vulnerable Software and Affected Versions: Mevin Productions Basic PHP Events Lister version 2.0 Description: The issue concerns improper access restriction to certain PHP files, specifically admin/reset.php and admin/user add.php. This allows remote authenticated users to reset...

CVE-2009-3168: Missing Authorization

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

Sql injection

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6464

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6464

CVE-2008-6464 affects Mevin Productions Basic PHP Events Lister 1.0. Vulnerable component: event.php. Issue: SQL injection via the id parameter that allows remote attackers to execute arbitrary SQL commands. Impact (per CVSS2): partial impact on confidentiality, integrity, and availability; netwo...

CVE-2008-6464: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...