EUVD-2008-0258

Malware in sbrugna...

Uploadscript 1.0 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ /...

UploadImage/UploadScript 1.0 - Remote Change Admin Password Exploit

No description provided by source. ?php / \|/// \ - - // Y! Underground Group @ @ ----oOOo---oOOo--------------------------------------------------- ! Portal : UploadImage v1.0 & UploadScript v1.0 ! Download : http://www.uploadscript.net ! Type : Remote Change Admin Password Exploit ! Home :...

Uploadscript 1.0 Disclosure / Shell Upload

Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| |...

Uploadscript 1.0 - Multiple Vulnerabilities

Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| |...

Uploadscript v1.0. Multiple Vulnerabilities

Exploit for unknown platform in category web applications =========================================== Uploadscript v1.0. Multiple Vulnerabilities =========================================== How to use it ? ----------------- Go to : http://site/path/password.txt You will find a Hashmd5 password !...

Design/Logic Flaw

admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass Set Password action...

CVE-2008-0246

admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass Set Password action...

CVE-2008-0246

The CVE-2008-0246 entry describes a vulnerability in admin.php of UploadScript 1.0 where the original password is not validated before changing to a new one. This allows remote attackers to gain administrator privileges by supplying the new password via the pass parameter in a nopass (Set Passwor...

CVE-2008-0246

admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass Set Password action...

UploadImage/UploadScript 1.0 Remote Change Admin Password Exploit

Exploit for unknown platform in category web applications ================================================================= UploadImage/UploadScript 1.0 Remote Change Admin Password Exploit ================================================================= 126 $result.=" ."; else $result.=" "...

UploadImageUploadScript 1.0 - Remote Change Admin Password

UploadImageUploadScript 1.0 - Remote Change Admin Password 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; re...

UploadImage/UploadScript 1.0 - Remote Change Admin Password

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; r...

UploadScript <=- v1.02 (password.txt) Remote Password Disclosure Vulnerability

UploadScript =- v1.02 password.txt Remote Password Disclosure Vulnerability Script: UploadScript Version: v1.02 URL: http://www.uploadscript.net/demo/download.php?file=1478fb6c5c807cdf12dd69410e14d66d Found By : BorN To K!LL Explo!T:. ^^^^^ www.site.com/path/password.txt GreeTz :. Dr.2 , Asbmay ,...

CVE-2006-6377

Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain the admin password hash via a direct request for /password.txt...

CVE-2006-6377

Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain the admin password hash via a direct request for /password.txt...

CVE-2006-6377

CVE-2006-6377 contributes a remote-access issue in Uploadscript 1.2 and earlier. The description states that sensitive data is stored under the web root with insufficient access control, enabling remote attackers to obtain the admin password hash by directly requesting /password.txt. The NVD note...