1946 matches found
paFAQ 1.0 Beta 4 Multiple Vulnerabilities
The remote host is running paFAQ, a web-based FAQ system implemented in PHP / MySQL. The installed version of paFAQ on the remote host suffers from several vulnerabilities. Among the more serious are a SQL injection vulnerability that enables an attacker to bypass admin authentication and a...
[EXPL] Mambo Remote Password Hash Retrieval (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
PAFaq beta4 - Database Unauthorized Access
source: https://www.securityfocus.com/bid/13999/info paFaq is prone to an unauthorized access vulnerability regarding the database. This issue is a result of the application failing to perform access validation on the 'backup.php' script. A remote unauthenticated user can invoke the script and...
PAFaq beta4 - Database Unauthorized Access
PAFaq beta4 - Database Unauthorized Access source: https://www.securityfocus.com/bid/13999/info paFaq is prone to an unauthorized access vulnerability regarding the database. This issue is a result of the application failing to perform access validation on the 'backup.php' script. A remote...
portalSQL.pl.txt
!/usr/bin/perl -w SQL Injection Exploit for Portail PHP .? / && print "+ Username of administrator is: $1\n"; print "- Unable to retrieve username\n" if!$1; $page=m/ : .?/ && print "+ MD5 hash of password is: $1\n"; print "- Unable to retrieve hash of password\n" if!$1;...
Mambo 4.5.2.1 Fetch Password Hash Remote Exploit
No description provided by source. !/usr/bin/php -q Mambo 4.5.2.1 + mysql 4.1 fetch password hash by pokleyzz pokleyzz at scan-associates.net ?php / Mambo 4.5.2.1 + mysql 4.1 fetch password hash by pokleyzz pokleyzz at scan-associates.net content rating using sub query to select from mosusers...
Mambo 4.5.2.1 Fetch Password Hash Remote Exploit
Exploit for unknown platform in category web applications ================================================ Mambo 4.5.2.1 Fetch Password Hash Remote Exploit ================================================ !/usr/bin/php -q Mambo 4.5.2.1 + mysql 4.1 fetch password hash by pokleyzz fetch password ha...
Portail PHP 1.3 - SQL Injection
Portail PHP 1.3 - SQL Injection !/usr/bin/perl -w SQL Injection Exploit for Portail PHP .? / && print "+ Username of administrator is: $1\n"; print "- Unable to retrieve username\n" if!$1; $page=m/ : .?/ && print "+ MD5 hash of password is: $1\n"; print "- Unable to retrieve hash of password\n"...
[EXPL] myBloggie SQL Injection (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
MyBulletinBoard (MyBB) <= 1.00 RC4 SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w SQL Injection Exploit for MyBulletinBoard MyBB = 1.00 RC4 This exploit show the MD5 crypted password of the user id you've chose Related advisory: Patch: http://www.mybboard.com/community/showthread.php?tid=2559 http://fain182.badroot.org...
MyBulletinBoard (MyBB) <= 1.00 RC4 SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== MyBulletinBoard MyBB .?/ && print "+ User ID is: $1\n"; print "- Unable to retrieve User ID\n" if!$1; $page = m/.?/ && print "+ MD5 hash of password is: $1\n"; print "- Unable to...
MyBloggie 2.1.1 2.1.2 - SQL Injection
MyBloggie 2.1.1 2.1.2 - SQL Injection !/usr/bin/perl -w SQL Injection Exploit for myBloggie 2.1.1 - 2.1.2 This exploit show the username of the administrator of the blog and his password crypted in MD5 Related advisories: Italian...
MyBulletinBoard (MyBB) 1.00 RC4 - 'calendar.php' SQL Injection
!/usr/bin/perl -w SQL Injection Exploit for MyBulletinBoard MyBB .?/ && print "+ User ID is: $1\n"; print "- Unable to retrieve User ID\n" if!$1; $page = m/.?/ && print "+ MD5 hash of password is: $1\n"; print "- Unable to retrieve hash of password\n" if!$1; milw0rm.com 2005-05-31...
Invision Power Board 2.0.3 - 'login.php' SQL Injection (Tutorial)
danica jones Tutorial for the recent exploit released by Petey Beege. 1. Get the exploit from http://www.milw0rm.com/id.php?id=1013 https://www.exploit-db.com/exploits/1013/ 2. Make sure you have LWP::UserAgent perl module if not do this: a. perl -MCPAN -e 'shell' b. inside the perl shell, do thi...
Invision Power Board <= 2.0.3 Login.PHP SQL Injection (tutorial)
No description provided by source. danica jones [email protected] Tutorial for the recent exploit released by Petey Beege. 1. Get the exploit from http://www.milw0rm.com/id.php?id=1013 2. Make sure you have LWP::UserAgent perl module if not do this: a. perl -MCPAN -e 'shell' b. inside the perl...
Woltlab Burning Board 2.3.1 - 'register.php' SQL Injection
!/usr/bin/perl use strict; use IO::Socket::INET; $| = print " Woltlab Burning Board $addr, PeerPort = $port, Proto = 'tcp', Timeout = 8 or die'- Could not connect to server'; if&test$i, 96 buchstabe formy $c=97;$c103;$c++ if&test$i, $c, 1 print pack'c', $c; last; else zahl print "0-4\n"; formy...
CVE-2005-1516
DList dlist.exe in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the cmdsendlog function...
CVE-2005-1516
The CVE-2005-1516 issue affects NetWin DMail 3.1a’s DList component. The vulnerability enables a remote attacker to bypass authentication, read log files, and shut down the system by sending a log request (sendlog) with an incorrect password hash, which is not properly handled by the internal _cm...
Multiple Sql injection and XSS in Asp Nuke 0.80 (Working exploits included)
Severity: High Title: Multiple Sql injection and XSS in Asp Nuke 0.80 Working exploits included Date: 22/04/2005 Vendor: Asp Nuke Vendor Website: http://www.aspnuke.com/ Summary: There are, multiple sql injection and xss in asp nuke 0.80. Proof of Concept Exploits:...
Serendipity 0.8beta4 exit.php SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Serendipity 0.8beta4 exit.php SQL Injection Exploit =================================================== !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security...