Lucene search
+L

4 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.24 views

No-CMS 0.6.6 rev 1 - Admin Account Hijacking / RCE Exploit via Static Encryption Key

No description provided by source. ?php / Static encryptionkey of No-CMS lead to Session Array Injection in order to hijack administrator account then you will be able for upload php files to server via theme/module upload. This exploit generates cookie for administrator access from non-privilege...

7.1AI score
SaveExploits0
zdt
zdt
added 2014/04/23 12:0 a.m.41 views

No-CMS 0.6.6 rev 1 - Admin Account Hijacking / RCE Exploit via Static Encryption Key

Exploit for php platform in category web applications ?php / Static encryptionkey of No-CMS lead to Session Array Injection in order to hijack administrator account then you will be able for upload php files to server via theme/module upload. This exploit generates cookie for administrator access...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2014/04/22 12:0 a.m.26 views

No-CMS 0.6.6 rev 1 - Admin Account Hijacking Remote Code Execution via Static Encryption Key

No-CMS 0.6.6 rev 1 - Admin Account Hijacking Remote Code Execution via Static Encryption Key ?php / Static encryptionkey of No-CMS lead to Session Array Injection in order to hijack administrator account then you will be able for upload php files to server via theme/module upload. This exploit...

1.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2014/04/22 12:0 a.m.60 views

No-CMS 0.6.6 Rev 1 Account Hijack / Remote Command Execution

mcryptexists = functionexists'mcryptencrypt';...

0.7AI score
SaveExploits0
Rows per page
Query Builder