Miniweb 2.0 - Authentication Bypass

Miniweb 2.0 Admin bypass Type: 'union select 1 in the username field and press login, you are admin! download: http://www.miniweb2.com/ Found by bizzit Contact: bizzitatlive.de Greetz to: Suicide, ReED, h0yt3r, J0hn^x3r, tmh, n00bor, Five-Three-Nine, electron1x, Nazrek, Free-Hack and Sys-Flaw...

CVE-2008-2197

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php...

Sql injection

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php...

CVE-2008-2197

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php...

CVE-2008-2197

CVE-2008-2197 is a SQL injection in the Miniweb blogwriter module 2.0. The vulnerability exposes index.php via the historymonth parameter, enabling remote attackers to execute arbitrary SQL. The NVD record lists a CVSS v2 base score of 7.5 (HIGH) with network access, no authentication, and partia...

CVE-2008-2197: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php...

Miniweb 2.0 (historymonth) Remote SQL Injection Vulnerability

No description provided by source. Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module...

miniweb-sql.txt

Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module Price: Only $39.00 Portal Price : $ 11...

Miniweb 2.0 - historymonth SQL Injection

Miniweb 2.0 - historymonth SQL Injection Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Modu...

Miniweb 2.0 (historymonth) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Miniweb 2.0 historymonth Remote SQL Injection Vulnerability ============================================================= Rem0te SQL Injection Vulnerability Miniweb 2.0 index.ph...

Miniweb 2.0 - 'historymonth' SQL Injection

Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module Price: Only $39.00 Portal Price : $ 11...

MiniWeb目录遍历和缓冲区溢出漏洞

MiniWeb是一款WEB服务程序。 MiniWeb不正确处理用户提交的输入，远程攻击者可以利用漏洞进行目录遍历和缓冲区溢出攻击。 如提交如下请求可导致触发漏洞： http://www.example.com/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/boot.ini GET /AAAA...3600 - 4000...AAAA/ HTTP/1.0 Stanley Huang MiniWeb 0.8.19 目前没有解决方案提供： http://sourceforge.net/projects/miniweb...

CVE-2008-0338

Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a 1 .%2e partially encoded dot dot or 2 %2e%2e encoded dot dot in the URI...

Heap overflow

Heap-based buffer overflow in the mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute arbitrary code via a long URI...

Directory traversal

Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a 1 .%2e partially encoded dot dot or 2 %2e%2e encoded dot dot in the URI...

CVE-2008-0338

Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a 1 .%2e partially encoded dot dot or 2 %2e%2e encoded dot dot in the URI...

CVE-2008-0338

The CVE-2008-0338 vulnerability affects MiniWeb HTTP Server 0.8.19, where the mwGetLocalFileName function in http.c is vulnerable to directory traversal via URI-encoded references (.%2e and %2e%2e). This could allow remote attackers to read arbitrary files and list directories. The provided docum...

CVE-2008-0337

Heap-based buffer overflow in the mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute arbitrary code via a long URI...

CVE-2008-0337

MiniWeb HTTP Server 0.8.19 is affected by a heap-based buffer overflow in the _mwProcessReadSocket function of http.c. An attacker can trigger this remotely by sending a long URI, potentially enabling arbitrary code execution. The root cause is an overflow in the socket-read handling. Affected ve...

miniweb-multi.txt

MiniWeb Multiple Vulnerabilities Introduction MiniWeb is a mini HTTP server implementation written in C language, featuring low system resource consumption, high efficiency, good flexibility and high portability. It is capable to serve multiple clients with a single thread, supporting GET and POS...