Siteman 1.1.10 - Remote Administrative Account Addition

Siteman 1.1.10 - Remote Administrative Account Addition !/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path...

MercuryBoard 1.1 - Multiple Input Validation Vulnerabilities

MercuryBoard 1.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/12359/info Multiple input validation vulnerabilities affect MercuryBoard. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in...

r57ita.pl.txt

!/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA/ admin 0 ! Exploiting adduser.php...

ITA Forum 1.49 - SQL Injection

!/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA/ admin 0 ! Exploiting adduser.php...

ITA Forum 1.49 - SQL Injection

ITA Forum 1.49 - SQL Injection !/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA/...

CVE-2004-2337

The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials...

CVE-2004-1788

ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb...

IMAP Service Cleartext Login Permitted

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. This script was...

Ipswitch WS_FTP Server 5.03 - RNFR Buffer Overflow

Ipswitch WSFTP Server 5.03 - RNFR Buffer Overflow ===== Start WSFTPOverflow.pl ===== Usage: WSFTPOverflow.pl WSFTPOverflow.pl 127.0.0.1 hello moto WSFTP Server Version 5.03, 2004.10.14 Download: http://www.ipswitch.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...

jabberd -- remote buffer overflow vulnerability

Caused by improper bounds-checking of username and password in the C2S module, it is possible for an attacker to cause a remote buffer overflow. The server directly handles the userinput with SQL backend functions - malicious input may lead to buffer overflow...

CVE-2004-0923

CVE-2004-0923 affects CUPS 1.1.20 and earlier, where authentication information for a device URI could be recorded in the error_log. This enables a local user to obtain usernames and passwords by reading the log. The issue is a log leakage caused by how CUPS handles device URIs with embedded cred...

Netbilling NBMEMBER Script - Information Disclosure

Netbilling NBMEMBER Script - Information Disclosure source: https://www.securityfocus.com/bid/11504/info Netbilling 'nbmember.cgi' script is reported prone to an information disclosure vulnerability. This issue may allow remote attackers to gain access to user authentication credentials and...

GLSA-200410-06 : CUPS: Leakage of sensitive information

The remote host is affected by the vulnerability described in GLSA-200410-06 CUPS: Leakage of sensitive information When printing to a SMB-shared printer requiring authentication, CUPS leaks the user name and password to a logfile. Impact : A local user could gain knowledge of sensitive...

[SA12736] CUPS Logfile User Credentials Disclosure

TITLE: CUPS Logfile User Credentials Disclosure SECUNIA ADVISORY ID: SA12736 VERIFY ADVISORY: http://secunia.com/advisories/12736/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: CUPS 1.x http://secunia.com/product/921/ DESCRIPTION: Gary Smith has...

PBLang v4.60 bug

Network security team nst.e-nex.com Title: PBLang v4.60 Bug found by: тёмыч Date: 29.09.2004 Web: http://pblang.drmartinus.de 1. Вы должны быть зарегистрированым юзэром. 2. Заходите в отдел PM Private Messages 3. Отошлите себе меседж. 4. Просмотрите пришедший месидж и с лева нажмите на Reply...

Serendipity 0.7-beta1 SQL Injection Proof of Concept

No description provided by source. Proof of Concept 1 ------------------ Usage: ./sersqlipoc.sh URLtoSerendipityWeblog sersqlipoc.sh ---------8-----------8------------- !/bin/sh echo -n "Username: " curl -I -s...

exploit in PHPBB 2010

explode: form action="" method="post" URL до форума:input type="text" name="url" size="50" value="http://www.phpbbexample.ru/forum/"br Колличество запросов:select name="select" size="1" option value="10"10/option option value="100"100/option option value="200"200/option option value="500"500/opti...

postgresql-contrib -- insecure temporary file creation

The makeoidjoinscheck script in the PostgreSQL RDBMS has insecure handling of temporary files, which could lead to an attacker overwriting arbitrary files with the credentials of the user running the makeoidjoinscheck script...

Nagl XOOPS Dictionary Module 1.0 - Multiple Cross-Site Scripting Vulnerabilities

Nagl XOOPS Dictionary Module 1.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11064/info Reportedly the XOOPS Dictionary Module by Nagle is affected by multiple cross-site scripting vulnerabilities. This issue is due to a failure of the application to...

PowerPortal modules/private_messages/index.php Multiple Parameter XSS

The remote host is using PowerPortal, a content management system, written in PHP. A vulnerability exists in the remote version of this product that may allow a remote attacker to inject arbitrary HTML tags in when sending a private message to a victim user of the remote portal. An attacker may...