Improper access control

Siteman 1.1.11 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for data/members.txt...

CVE-2007-0594

CVE-2007-0594 : The vulnerability affects Siteman 2.0.x2, where sensitive data is stored under the web root with insufficient access control. An attacker could remotely trigger a direct request to db/siteman/users.MYD and download the password-hash database. The described impact is partial confid...

CVE-2007-0593

CVE-2007-0593 affects Siteman 1.1.11, where sensitive data is stored under the web root with insufficient access control. An unauthenticated remote attacker can access data/members.txt to download a database containing password hashes. The description, supported by NVD entries, does not provide t...

CVE-2007-0594

Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for db/siteman/users.MYD...

CVE-2007-0593

Siteman 1.1.11 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for data/members.txt...

siteman1111-disclose.txt

-=--------------------ADVISORY-------------------=- Siteman 1.1.11 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Siteman -=+ Version: 1.1.11 -=+ Vendor's URL: http://home.no.net/siteman/ -=+ Platform: Windows\Linux\Unix -=+ Bug type: Remote...

siteman-pass.txt

-=--------------------ADVISORY-------------------=- Siteman 2.0.x2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Siteman 2.0.x2 -=+ Version: 2.0.x2 -=+ Vendor's URL: http://home.no.net/siteman/ -=+ Platform: Windows\Linux\Unix -=+ Bug type:...

[x0n3-h4ck] Siteman 2.0.x2 Remote Md5 Hash Disclosure Vulnerability

-=--------------------ADVISORY-------------------=- Siteman 2.0.x2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Siteman 2.0.x2 -=+ Version: 2.0.x2 -=+ Vendor's URL: http://home.no.net/siteman/ -=+ Platform: WindowsLinuxUnix -=+ Bug type:...

CVE-2006-1586

SQL injection vulnerability in adminlogin.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter...

CVE-2006-1586

CVE-2006-1586 concerns a SQL injection in the admin_login.asp script of ISP of Egypt SiteMan, exploitable via the pass parameter to allow remote execution of arbitrary SQL commands. The vulnerability affects the login-related functionality and arises from improper handling of input in the pass pa...

SiteMan <= All version SQL injection in admin_login.asp

Vendor : SiteMan Target Page : adminlogin.asp Bug Finder : S3rv3rhack3r administrator panel demo: http://www.ispdemos.com/Demo/SiteMan/adminlogin.asp WWW : http://www.ispofegypt.com/ you can login to adminlogin.asp with user : admin pass : ' or '...

CVE-2005-0305

CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation...

[SA14263] Siteman Site Owner Registration Security Bypass Vulnerability

TITLE: Siteman Site Owner Registration Security Bypass Vulnerability SECUNIA ADVISORY ID: SA14263 VERIFY ADVISORY: http://secunia.com/advisories/14263/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Siteman 1.x http://secunia.com/product/4655/ DESCRIPTION: A...

Siteman users.php Remote Buffer Overflow

Binary data 2619.prm...

CVE-2005-0305

CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation...

CVE-2005-0305

CVE-2005-0305 affects Siteman 1.1.10 and earlier. A CRLF injection vulnerability in users.php, triggered via the line parameter in a docreate operation, allows remote attackers with valid credentials to create arbitrary user accounts and gain privileges (administrative access). The root cause is ...

siteman.noam.txt

!/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path = shift; my $Host = shift; my $Username = shift; my...

Siteman <= 1.1.10 Remote Administrative Account Addition Exploit

No description provided by source. !/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" [email protected] use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.hos...

Siteman <= 1.1.10 Remote Administrative Account Addition Exploit

Exploit for unknown platform in category web applications ================================================================ Siteman use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path = shift; my $Host = shift; my $Username = shift; my...

siteman.txt

God Admin Injection Vulnerability in Siteman 1.0.x, Discovered by PersianHacker.NET Security Team by amironline452 amironline452 hotmail com http://www.PersianHacker.NET http://www.amironline452.tk Siteman is a Content Management System CMS that is so easy to install and use, that a person who ha...