2031 matches found
PT-2005-4743 · Sapid · Sapid Cms
Name of the Vulnerable Software and Affected Versions: SAPID CMS versions prior to 1.2.3.03 Description: The issue involves multiple unspecified vulnerabilities related to newly registered users and possibly authorization checks. These vulnerabilities have unknown impact and attack vectors,...
CVE-2003-1252
The CVE-2003-1252 entry covers a vulnerability in register.php of S8Forum 3.0 where remote attackers can trigger arbitrary PHP execution by creating a user whose name ends in .php and placing commands in the E-mail field. This creates a web-accessible .php file that can be invoked to run commands...
[Full-disclosure] HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability
------------------------------------------------------ HYSA-2005-009 h4cky0u.org Advisory 009 ------------------------------------------------------ Date - Tue Nov 1 2005 TITLE: ====== Elite Forum 1.0.0.0 XSS Vulnerability SEVERITY: ========= Medium SOFTWARE: ========= Elite Forum 1.0.0.0 INFO:...
Net Portal Dynamic System <= 5.0 (register users) Denial of Service
Exploit for multiple platform in category dos / poc =================================================================== Net Portal Dynamic System = 5.0 register users Denial of Service =================================================================== !/usr/bin/perl Type|+ Register multiple user...
CVE-2005-2894
Cross-site scripting XSS vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary web script or PHP via the location field...
CVE-2005-2894
PBLang 4.65 (and possibly earlier) contains a Cross-site scripting (XSS) vulnerability in the user registration process. The flaw allows remote attackers to inject arbitrary web script or PHP via the location field, as described in CVE-2005-2894. The NVD entry lists this as a MEDIUM-severity issu...
phpBB 2.0.15 - Register Multiple Users (Denial of Service) (C)
phpBB 2.0.15 - Register Multiple Users Denial of Service C / -------------------------------------------------------- Neo Security Team NST® - Advisory 15 - 00/00/06 -------------------------------------------------------- Program: phpBB 2.0.15 Homepage: http://www.phpbb.com Vulnerable Versions:...
phpBB <= 2.0.15 Register Multiple Users Denial of Service (perl code)
Exploit for unknown platform in category web applications ===================================================================== phpBB = 2.0.15 Register Multiple Users Denial of Service perl code ===================================================================== !/usr/bin/perl Name: NsT-phpBBDo...
hosting061.txt
Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : unauthenticated user registeration Risk : High! Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.9...
CVE-2005-1654
CVE-2005-1654 affects Hosting Controller 6.1 Hotfix 1.9 and earlier. The vulnerability allows remote attackers to register arbitrary users by issuing a direct request to addsubsite.asp with the loginname and password parameters set, enabling unauthorized account creation. Related documentation ci...
Woltlab Burning Board SQL Injection Vulnerability
GulfTech Security Research May 16th, 2005 Vendor : Woltlab GmbH URL : http://www.woltlab.de/ Version : Burning Board 2. And Earlier Risk : SQL Injection Vulnerabilities Description: Burning Board is a popular, multi purpose forum / community software offered by WoltLab GmbH. There is an SQL...
Hosting Controller 0.6.1 - User Registration (2)
Hosting Controller 0.6.1 - User Registration 2 / Hosting Controller include include include include include define PORT1 80 // port of web server define PORT...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (2nd)
Exploit for unknown platform in category remote exploits ==================================================================== Hosting Controller include include s...
Hosting Controller 0.6.1 - User Registration (1)
Domain: Username: INPUT type="hidden" name="choice" value="1"...
Hosting Controller unauthenticated user registeration
-= Security Advisory =- Advisory Information Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : unauthenticated user registeration Risk : High! Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.9 Vend...
Hosting Controller 0.6.1 - User Registration (1)
Hosting Controller 0.6.1 - User Registration 1 Domain: Username: INPUT type="hidden" name="htype" value="27" id="htyp...
CVE-2004-1651
CVE-2004-1651 affects the phpScheduleIt 1.0.0 RC1 registration page. The vulnerabilities are cross-site scripting (XSS) via user-supplied input in (1) Name, (2) Lastname, and (3) Schedule Name fields during new user registration. The root cause is insufficient input sanitization, enabling remote ...
phpScheduleIt < 1.0.0 New User Registration HTML Injection
Binary data 2191.prm...
CVE-2004-1651
Multiple cross-site scripting XSS vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Lastname fields during new user registration, or 3 the Schedule Name field...
WpQuiz Gain Admin Rightd Exploit found
Ok so here is what I found Authors website wireplastik.com currently down php script I found exploit in wpquiz version 2.60b8 also tested on 2.60b 1-7 Exploit: by default wpquiz comes with a folder called extras. This folder is not password protected nor does it require any sort of authentication...