CVE-2008-4590

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to admin/login.php and 2 the post parameter to admin/news.php...

CVE-2008-4590

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to admin/login.php and 2 the post parameter to admin/news.php...

Sql injection

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to admin/login.php and 2 the post parameter to admin/news.php...

CVE-2008-4590

CVE-2008-4590 affects Stash 1.0.3 and involves multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to admin/login.php and (2) the post parameter to admin/news.php. The NVD notes a base score of 7.5 (HIGH) with ...

CVE-2008-4590

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to admin/login.php and 2 the post parameter to admin/news.php...

Stash 1.0.3 (SQL) User Credentials Disclosure Exploit

No description provided by source. !/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl Gnix [email protected] http://gnix.netsons.org This exploit use an SQL Injection in the file admin/login.php to bypass the login, and then an SQL Injection in the admin/news.php to extract a...

CVE-2008-4080

SQL injection vulnerability in Stash 1.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 username parameter to admin/library/authenticate.php and the 2 download parameter to downloadmp3.php. NOTE: some of these details are obtained from thir...

Sql injection

SQL injection vulnerability in Stash 1.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 username parameter to admin/library/authenticate.php and the 2 download parameter to downloadmp3.php. NOTE: some of these details are obtained from thir...

CVE-2008-4080

SQL injection vulnerability in Stash 1.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 username parameter to admin/library/authenticate.php and the 2 download parameter to downloadmp3.php. NOTE: some of these details are obtained from thir...

CVE-2008-4081

CVE-2008-4081 affects Stash 1.0.3: admin/login.php permits remote authentication bypass by setting a bsm cookie, enabling administrative access. The NVD lists a CVSS 2.0 base score of 7.5 (HIGH) with network access and low attack complexity. No explicit remediation details are provided in the con...

CVE-2008-4080

CVE-2008-4080 documents a SQL injection vulnerability in Stash 1.0.3, triggered when magic_quotes_gpc is disabled. The affected inputs are the username parameter to admin/library/authenticate.php and the download parameter to downloadmp3.php, allowing remote attackers to execute arbitrary SQL com...

CVE-2008-4081

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie...

Stash 1.0.3 Multiple SQL Injection Vulnerabilities

No description provided by source. Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

Stash v1.0.3 Admin bypass / Remote File Disclosure

Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

Stash 1.0.3 Insecure Cookie Handling Vulnerability

No description provided by source. ...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms :...

Stash 1.0.3 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================== Stash 1.0.3 Insecure Cookie Handling Vulnerability ================================================== ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdis...

Stash 1.0.3 - Multiple SQL Injections

Stash 1.0.3 - Multiple SQL Injections Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

stash-bypass.txt

Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

Stash 1.0.3 - Insecure Cookie Handling

Stash 1.0.3 - Insecure Cookie Handling ...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms :...

Stash 1.0.3 - Insecure Cookie Handling

...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms : http://sourceforge.net/project/showfiles.php?groupid=206129 -----------------------...