51 matches found
MOC Designs PHP News 1.1 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. + MOC Designs PHP News v1.1 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://www.mocdesigns.com/ + SQL Injection Auth Bypass - PoC http://127.0.0.1/news/login.php User : 'or''='...
MOC Designs PHP News 1.1 - Authentication Bypass
MOC Designs PHP News 1.1 - Authentication Bypass + MOC Designs PHP News v1.1 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://www.mocdesigns.com/ + SQL Injection Auth Bypass - PoC http://127.0.0.1/news/login.php Use...
MOC Designs PHP News 1.1 (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== MOC Designs PHP News 1.1 Auth Bypass SQL Injection Vulnerability ================================================================== + MOC Designs PHP News v1.1 Auth Bypass...
MOC Designs PHP News 1.1 - Authentication Bypass
MOC Designs PHP News v1.1 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://www.mocdesigns.com/ + SQL Injection Auth Bypass - PoC http://127.0.0.1/news/login.php User : 'or''=' Password : 'or''=' - Live Demo...
Code injection
Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into news.txt via the post parameter, and then execute the code via a direct request to display.php. NOTE: some of these details are obtained from third party...
CVE-2009-0643
CVE-2009-0643 describes a static code injection in Simple PHP News 1.0 final. An attacker can inject arbitrary PHP code into news.txt via the post parameter and then trigger execution by requesting display.php, indicating a combination of unsafeguarded input handling and file-based code execution...
CVE-2009-0643
Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into news.txt via the post parameter, and then execute the code via a direct request to display.php. NOTE: some of these details are obtained from third party...
CVE-2009-0610
Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the 1 title or 2 date parameter, and then execute the code via a direct request to display.php. NOTE: the provenance of this information is...
Code injection
Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the 1 title or 2 date parameter, and then execute the code via a direct request to display.php. NOTE: the provenance of this information is...
CVE-2009-0610
Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the 1 title or 2 date parameter, and then execute the code via a direct request to display.php. NOTE: the provenance of this information is...
Simple PHP News 1.0 - Remote Command Execution
Simple PHP News 1.0 - Remote Command Execution !/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = Simple PHP News 1.0 Final Downl =...
Simple PHP News 1.0 Remote Command Execution Exploit
Exploit for unknown platform in category web applications ==================================================== Simple PHP News 1.0 Remote Command Execution Exploit ==================================================== !/usr/bin/perl...
Simple PHP News 1.0 Final Code Execution
!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = Simple PHP News 1.0 Final Downl = http://www.hotscripts.com/jump.php?listingid=66376&jumptype=1 Remote...
Simple PHP News 1.0 - Remote Command Execution
!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = Simple PHP News 1.0 Final Downl = http://www.hotscripts.com/jump.php?listingid=66376&jumptype=1 Remote...
CVE-2008-0469
CVE-2008-0469 affects Tiger Php News System (TPNS) up to version 1.0b. The vulnerability is a SQL injection in the index.php file, exploitable via the catid parameter in the newscat action. Remote attackers could potentially execute arbitrary SQL commands (partial to full data access/ modificatio...
Tiger PHP News System 1.0b build 39 Remote SQL Injection Vulnerability
No description provided by source. / Tiger PHP News System SQL Injection Bug found bY 0in from DaRk-Coders Group! Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl IRC:dark-coders at irc.freenode.org Email: 0indotemailatgmaildotcom / Script home: http://tpns.k-na.se/ Exploit:...
Tiger PHP News System 1.0b build 39 - SQL Injection
Tiger PHP News System 1.0b build 39 - SQL Injection / Tiger PHP News System SQL Injection Bug found bY 0in from DaRk-Coders Group! Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl IRC:dark-coders at irc.freenode.org Email: 0indotemailatgmaildotcom / Script home: http://tpns.k-na.s...
Tiger PHP News System 1.0b build 39 Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Tiger PHP News System 1.0b build 39 Remote SQL Injection Vulnerability ====================================================================== / Tiger PHP News System SQ...
Tiger PHP News System 1.0b build 39 - SQL Injection
/ Tiger PHP News System SQL Injection Bug found bY 0in from DaRk-Coders Group! Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl IRC:dark-coders at irc.freenode.org Email: 0indotemailatgmaildotcom / Script home: http://tpns.k-na.se/ Exploit:...
Tiger PHP News System SQL Injection
/ Tiger PHP News System SQL Injection Bug found bY 0in from DaRk-Coders Group! Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl IRC:dark-coders at irc.freenode.org Email: 0indotemailatgmaildotcom / Script home: http://tpns.k-na.se/ Exploit:...