13 matches found
EUVD-2005-2479
Malware in sbrugna...
SilverNews 2.04 Local File Inclusion
!/usr/bin/perl -w SilverNews 2.04 Local File Inclusion Exploit Script: http://www.silver-scripts.de Vuln C0de: require "admin/header.php"; if fileexists'admin/'.$GET'section'.".php" require 'admin/'.$GET'section'.'.php'; ---LFI by d3b4g Follow me on twitter.www.twitter.com/schaba From Tiny Little...
SilverNews 2.04 - Authentication Bypass Local File Inclusion Remote Code Execution
SilverNews 2.04 - Authentication Bypass Local File Inclusion Remote Code Execution 0x01 Informations: Name : SilverNews 2.04 Download : http://www.silver-scripts.de/scripts.php?script=SilverNews&l=en Vulnerability : Auth Bypass\LFI\RCE Author : x0r Contact : [email protected] Notes : Proud to ...
SilverNews 2.04 - Authentication Bypass / Local File Inclusion / Remote Code Execution
0x01 Informations: Name : SilverNews 2.04 Download : http://www.silver-scripts.de/scripts.php?script=SilverNews&l=en Vulnerability : Auth Bypass\LFI\RCE Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/admin.php Code // Get the user informatio...
SilverNews 2.04 (Auth Bypass/LFI/RCE) Multiple Vulnerabilities
No description provided by source. 0x01 Informations: Name : SilverNews 2.04 Download : http://www.silver-scripts.de/scripts.php?script=SilverNews&l=en Vulnerability : Auth Bypass\LFI\RCE Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is...
SilverNews 2.04 (Auth Bypass/LFI/RCE) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== SilverNews 2.04 Auth Bypass/LFI/RCE Multiple Vulnerabilities ============================================================== 0x01 Informations: Name : SilverNews 2.04 Download :...
SilverNews 2.04 Bypass / LFI / Code Execution
0x01 Informations: Name : SilverNews 2.04 Download : http://www.silver-scripts.de/scripts.php?script=SilverNews&l=en Vulnerability : Auth Bypass\LFI\RCE Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/admin.php Code // Get the user informatio...
SilverNews < 2.0.4 Multiple Vulnerabilities
The remote host is running SilverNews, a free news script written in PHP. The version of SilverNews installed on the remote host suffers from several flaws : - SQL Injection Vulnerability The application does not sanitize user-supplied input to the 'username' parameter of the 'admin.php' script...
CVE-2005-2478
SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel...
CVE-2005-2478
SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel...
CVE-2005-2478
SilverNews is affected by CVE-2005-2478 due to multiple issues. The primary flaw is an SQL Injection in the admin login: user input in the username parameter of admin.php is not sanitized before use in queries, allowing remote attackers to execute arbitrary SQL commands. Additionally, in combinat...
silvernews203.txt
Silvernews 2.0.3 possibly previous versions SQL Injection / Login Bypass / Remote commands execution / cross site scripting software: author site: http://www.silver-scripts.de/scripts.php?l=en&script=SilverNews SQL Injection / Login bypass: A user can bypass admin password check, if magicquotes i...
Silvernews 2.0.3 (possibly previous versions ) SQL Injection / Login Bypass / Remote commands execution / cross site scripting
Silvernews 2.0.3 possibly previous versions SQL Injection / Login Bypass / Remote commands execution / cross site scripting software: author site: http://www.silver-scripts.de/scripts.php?l=en&script=SilverNews SQL Injection / Login bypass: A user can bypass admin password check, if magicquotes i...