496 matches found
Aspee Ziyaretci Defteri - giris.asp Multiple Field SQL Injections
Aspee Ziyaretci Defteri - giris.asp Multiple Field SQL Injections source: https://www.securityfocus.com/bid/21398/info Aspee Ziyaretçi Defteri is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query...
emekportal21.txt
BiyoSecurity.Org script name : Emek Portal v2.1 tr Script Download : http://www.aspindir.com/indir.asp?id=2728 Risk : High Regards : Dj ReMix Thanks : Korsan , Liz0zim , TrIP Vulnerable file : girisyap.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to script/uyegiris.as...
Emek Portal v2.1 SQL Injection
BiyoSecurity.Org script name : Emek Portal v2.1 tr Script Download : http://www.aspindir.com/indir.asp?id=2728 Risk : High Regards : Dj ReMix Thanks : Korsan , Liz0zim , TrIP Vulnerable file : girisyap.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to script/uyegiris.as...
eFiction 2.0.7 - Remote Admin Authentication Bypass
eFiction 2.0.7 - Remote Admin Authentication Bypass eFiction vulnerability I am releasing this to the public. Vendor was notified. Someone is also illegally defacing these websites under MY name, which is a shame because they ripped it from a private discussion on g00ns.net. This proof of concept...
eFiction < 2.0.7 Remote Admin Authentication Bypass Vulnerability
No description provided by source. eFiction vulnerability I am releasing this to the public. Vendor was notified. Someone is also illegally defacing these websites under MY name, which is a shame because they ripped it from a private discussion on g00ns.net. This proof of concept is not to be use...
TinyPHP Forum <= 3.6 (makeadmin) Remote Admin Maker Exploit
Exploit for unknown platform in category web applications =========================================================== TinyPHP Forum By SirDarckCat from elhacker.net Existing User: document.forms0.action=prompt"Path to forum","http://www.server.com/tpf/"+"updatepf.php"; 0day.today 2018-04-12...
TinyPHP Forum 3.6 - 'makeAdmin' Remote Admin Maker
TinyPHPForum 3.6 Admin Maker By SirDarckCat from elhacker.net Existing User: document.forms0.action=prompt"Path to forum","http://www.server.com/tpf/"+"updatepf.php"; milw0rm.com 2006-08-02...
TinyPHP Forum 3.6 - makeAdmin Remote Admin Maker
TinyPHP Forum 3.6 - makeAdmin Remote Admin Maker TinyPHPForum 3.6 Admin Maker By SirDarckCat from elhacker.net Existing User: document.forms0.action=prompt"Path to forum","http://www.server.com/tpf/"+"updatepf.php"; milw0rm.com 2006-08-02...
TinyPHP Forum <= 3.6 (makeadmin) Remote Admin Maker Exploit
No description provided by source. TinyPHPForum 3.6 Admin Makerbr By SirDarckCat from elhacker.net FORM method=post enctype="multipart/form-data" Existing User:INPUT name=unamebr INPUT type=file name=userfile style="visibility:HIDDEN"br INPUT type=hidden name=email value="[email protected]" input type=hidden...
aspWebLinks2.0.txt
AspWebLink 2.0 Remote Admin Pass Change Exploit Administrative Password:Number of Days New:Number of Visits Hot:Links Per Page:input type='text' name=...
paNews 2.0b4 Remote Admin Creation SQL Injection Exploit
No description provided by source. / paNews v2.0b4 silePNEWSxpl This exploit utilize SQL injection for create a new user with admin privileges on paNews software system. References: packetstormsecurity.org/0503-exploits/panews.txt coded by: Silentium of Anacron Group Italy date: 04/03/2005 e-mail...
paNews 2.0b4 - Remote Admin Creation SQL Injection
/ paNews v2.0b4 silePNEWSxpl This exploit utilize SQL injection for create a new user with admin privileges on paNews software system. References: packetstormsecurity.org/0503-exploits/panews.txt coded by: Silentium of Anacron Group Italy date: 04/03/2005 e-mail: anacrongroupitalyatautisticidotor...
cPanel 5-9 - Killacct Script Customer Account DNS Information Deletion
source: https://www.securityfocus.com/bid/10468/info cPanel is prone to a vulnerability that can allow a remote authenticated administrator to delete customer account DNS information for customers that are not administered by that administrator. This attack can allow an attacker to cause a denial...
IRCXpro 1.0 - Clear local and default remote admin passwords
------------------------------------------------------------------ - EXPL-A-2003-002 exploitlabs.com Advisory 002 ------------------------------------------------------------------ -=- IRCXpro 1.0 -=- Vunerabilitys: ---------------- 1.local clear passwords 2.remote default admin enabled Product:...
NewsDaemon does not adequately filter user input to $user_username
Overview NewsDaemon prior to version 0.21b contains a vulnerability allowing remote attackers to gain administrative access to the web site. Description NewsDaemon is a PHP-based tool used to allow readers to submit and comments on news items and stories over the web. It also allows for...
CVE-1999-0221
CVE-1999-0221 concerns Denial of Service against Ascend routers via remote admin port 150. Connected sources confirm the issue affects Ascend routers and is triggered through port 150, with the Red Hat advisory repeating the DoS description. The PT-1999-1015 entry reiterates the vulnerability nam...