Lucene search
+L

51 matches found

seebug.org
seebug.org
added 2009/08/05 12:00 a.m.42 views

MOC Designs PHP News 1.1 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + MOC Designs PHP News v1.1 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://www.mocdesigns.com/ + SQL Injection Auth Bypass - PoC http://127.0.0.1/news/login.php User : 'or''='...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2009/08/04 12:00 a.m.17 views

MOC Designs PHP News 1.1 - Authentication Bypass

MOC Designs PHP News 1.1 - Authentication Bypass + MOC Designs PHP News v1.1 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://www.mocdesigns.com/ + SQL Injection Auth Bypass - PoC http://127.0.0.1/news/login.php Use...

1AI score
SaveExploits0
zdt
zdt
added 2009/08/04 12:00 a.m.25 views

MOC Designs PHP News 1.1 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== MOC Designs PHP News 1.1 Auth Bypass SQL Injection Vulnerability ================================================================== + MOC Designs PHP News v1.1 Auth Bypass...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/08/04 12:00 a.m.28 views

MOC Designs PHP News 1.1 - Authentication Bypass

MOC Designs PHP News v1.1 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://www.mocdesigns.com/ + SQL Injection Auth Bypass - PoC http://127.0.0.1/news/login.php User : 'or''=' Password : 'or''=' - Live Demo...

7.5CVSS5.8AI score0.01154EPSS
SaveExploits1
Prion
Prion
added 2009/02/20 6:47 a.m.20 views

Code injection

Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into news.txt via the post parameter, and then execute the code via a direct request to display.php. NOTE: some of these details are obtained from third party...

5.1CVSS8AI score0.04811EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2009/02/18 5:00 p.m.54 views

CVE-2009-0643

CVE-2009-0643 describes a static code injection in Simple PHP News 1.0 final. An attacker can inject arbitrary PHP code into news.txt via the post parameter and then trigger execution by requesting display.php, indicating a combination of unsafeguarded input handling and file-based code execution...

5.1CVSS7.6AI score0.04811EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2009/02/18 5:00 p.m.38 views

CVE-2009-0643

Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into news.txt via the post parameter, and then execute the code via a direct request to display.php. NOTE: some of these details are obtained from third party...

7.4AI score0.04811EPSS
SaveExploits1References5
NVD
NVD
added 2009/02/17 5:30 p.m.19 views

CVE-2009-0610

Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the 1 title or 2 date parameter, and then execute the code via a direct request to display.php. NOTE: the provenance of this information is...

7.5CVSS7.4AI score0.04817EPSS
SaveExploits1References2
Prion
Prion
added 2009/02/17 5:30 p.m.17 views

Code injection

Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the 1 title or 2 date parameter, and then execute the code via a direct request to display.php. NOTE: the provenance of this information is...

7.5CVSS7.9AI score0.04817EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2009/02/17 5:00 p.m.31 views

CVE-2009-0610

Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the 1 title or 2 date parameter, and then execute the code via a direct request to display.php. NOTE: the provenance of this information is...

7.4AI score0.04817EPSS
SaveExploits1References2
exploitpack
exploitpack
added 2009/02/06 12:00 a.m.12 views

Simple PHP News 1.0 - Remote Command Execution

Simple PHP News 1.0 - Remote Command Execution !/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = Simple PHP News 1.0 Final Downl =...

0.2AI score
SaveExploits0
zdt
zdt
added 2009/02/06 12:00 a.m.74 views

Simple PHP News 1.0 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ==================================================== Simple PHP News 1.0 Remote Command Execution Exploit ==================================================== !/usr/bin/perl...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/02/06 12:00 a.m.27 views

Simple PHP News 1.0 Final Code Execution

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = Simple PHP News 1.0 Final Downl = http://www.hotscripts.com/jump.php?listingid=66376&jumptype=1 Remote...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/02/06 12:00 a.m.36 views

Simple PHP News 1.0 - Remote Command Execution

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = Simple PHP News 1.0 Final Downl = http://www.hotscripts.com/jump.php?listingid=66376&jumptype=1 Remote...

7.5CVSS5.8AI score0.04817EPSS
SaveExploits1
CVE
CVE
added 2008/01/29 7:00 p.m.62 views

CVE-2008-0469

CVE-2008-0469 affects Tiger Php News System (TPNS) up to version 1.0b. The vulnerability is a SQL injection in the index.php file, exploitable via the catid parameter in the newscat action. Remote attackers could potentially execute arbitrary SQL commands (partial to full data access/ modificatio...

7.5CVSS8.3AI score0.01235EPSS
SaveExploits1References7Affected Software1
seebug.org
seebug.org
added 2008/01/26 12:00 a.m.128 views

Tiger PHP News System 1.0b build 39 Remote SQL Injection Vulnerability

No description provided by source. / Tiger PHP News System SQL Injection Bug found bY 0in from DaRk-Coders Group! Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl IRC:dark-coders at irc.freenode.org Email: 0indotemailatgmaildotcom / Script home: http://tpns.k-na.se/ Exploit:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2008/01/25 12:00 a.m.26 views

Tiger PHP News System 1.0b build 39 - SQL Injection

Tiger PHP News System 1.0b build 39 - SQL Injection / Tiger PHP News System SQL Injection Bug found bY 0in from DaRk-Coders Group! Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl IRC:dark-coders at irc.freenode.org Email: 0indotemailatgmaildotcom / Script home: http://tpns.k-na.s...

0.4AI score
SaveExploits0
zdt
zdt
added 2008/01/25 12:00 a.m.23 views

Tiger PHP News System 1.0b build 39 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Tiger PHP News System 1.0b build 39 Remote SQL Injection Vulnerability ====================================================================== / Tiger PHP News System SQ...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/01/25 12:00 a.m.42 views

Tiger PHP News System 1.0b build 39 - SQL Injection

/ Tiger PHP News System SQL Injection Bug found bY 0in from DaRk-Coders Group! Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl IRC:dark-coders at irc.freenode.org Email: 0indotemailatgmaildotcom / Script home: http://tpns.k-na.se/ Exploit:...

7.5CVSS5.8AI score0.01235EPSS
SaveExploits1
securityvulns
securityvulns
added 2008/01/24 12:00 a.m.63 views

Tiger PHP News System SQL Injection

/ Tiger PHP News System SQL Injection Bug found bY 0in from DaRk-Coders Group! Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl IRC:dark-coders at irc.freenode.org Email: 0indotemailatgmaildotcom / Script home: http://tpns.k-na.se/ Exploit:...

0.2AI score
SaveExploits0
Rows per page
Query Builder