153 matches found
CVE-2005-1787
CVE-2005-1787 affects phpStat 1.5; setup.php contains a flaw where remote attackers can bypass authentication and gain administrator privileges by setting the $check variable. The connected documents confirm this vulnerability but do not provide detailed exploit steps or patches within the given ...
phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (php 2)
Exploit for unknown platform in category web applications ================================================================ phpStat = 1.5 setup.php Authentication Bypass Exploit php 2 ================================================================ ? / PHP Stat Administrative User Authentication...
phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (php)
Exploit for unknown platform in category web applications ============================================================== phpStat "; print ""; print "Username : "; print "Password : "; print " \n"; print ""; //----------------------...
phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (perl)
Exploit for unknown platform in category web applications =============================================================== phpStat mhp0rtal , Oilkarchack , Str0ke & AlphaST.Com So Iranian Hacking & Security Teams : Crouz , Shabgard , Simorgh-ev ,IHS , Emperor & GrayHatz.NeT use IO::Socket; if @ARG...
phpStat 1.5 - 'setup.php' Authentication Bypass
!/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR - PHPStat Setup.PHP Authentication Bypass Vulnerability Exploit By : A l p h a P r o g r a m m e r Sirus-v E-Mail : [email protected] This Xpl Change Admin's Pass in This Portal !! Discovered by:...
phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (php)
No description provided by source. ?php errorreportingEPARSE; / ================================================================ PHP Stat Administrative User Authentication Bypass POC Exploit ================================================================ ====Trap-Set Underground Hacking...
phpStat 1.5 - setup.php Authentication Bypass (PHP) (1)
phpStat 1.5 - setup.php Authentication Bypass PHP 1 "; print ""; print "Username : "; print "Password : "; print " \n"; print ""; //------------------------------------------------------End. ? milw0rm.com 2005-05-30...
phpStat 1.5 - setup.php Authentication Bypass (Perl)
phpStat 1.5 - setup.php Authentication Bypass Perl !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR - PHPStat Setup.PHP Authentication Bypass Vulnerability Exploit By : A l p h a P r o g r a m m e r Sirus-v E-Mail : [email protected] This Xpl Change...
PHP Stat Administrative User Authentication Bypass
=========================================================== ============================================================ Title: PHP Stat Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 25/05/2005 Severity: Medium. PHP Stat Administrative User Authentication...
CVE-2005-1787
setup.php in phpStat 1.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the $check variable...
PHProjekt: setup.php vulnerability
Background PHProjekt is a modular groupware web application used to coordinate group activities and share files. Description Martin Muench, from it.sec, found a flaw in the setup.php file. Impact Successful exploitation of the flaw allows a remote attacker without admin rights to make unauthorize...
[SA13355] PHProjekt Unspecified "setup.php" Security Bypass Vulnerability
TITLE: PHProjekt Unspecified "setup.php" Security Bypass Vulnerability SECUNIA ADVISORY ID: SA13355 VERIFY ADVISORY: http://secunia.com/advisories/13355/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: PHProjekt 4.x http://secunia.com/product/4346/ DESCRIPTION:...
osTicket setup.php Accessibility
The target is running at least one instance of an improperly secured installation of osTicket and allows access to setup.php. Since that script does not require authenticated access, it is possible for an attacker to modify osTicket's configuration using a specially crafted call to setup.php to...