Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack the authentication of arbitrary users for requests that use a modified image parameter...

Blue Eye CMS 1.0.0 Cookie SQL Injection

BlueEye CMS Download: http://kent.dl.sourceforge.net/sourceforge/blueeyecms/blueeyecms-100preRC.rar need magicquotesgpc = Off - Vuln code: 10: if !empty$COOKIE"BlueEyeCMSlogin" // -- Only?? 11: $clogin = $COOKIE"BlueEyeCMSlogin"; // -- Not clean?? 12: $cpass = $COOKIE"BlueEyeCMSpass"; 13: $ckey =...

RedHat Update for samba RHSA-2007:1114-01

Check for the Version of samba OpenVAS Vulnerability Test RedHat Update for samba RHSA-2007:1114-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

[SECURITY] Fedora 10 Update: curl-7.19.4-1.fc10

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

Sql injection

Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to gallerycategory.php, 2 photoid parameter to galleryphoto.php, and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some...

XGuestBook 2.0 - Authentication Bypass

Author = FireShot , Jacopo Vuga. Mail = fireshotautisticiorg Vulnerability = SQL Admin Auth Bypass Software = XGuestBook v2.0 Download =http://script.wareseeker.com/download/xguestbook.rar/14488 Greets to = Osirys, Myral, str0ke CODE $user = $POST'user'; $pass = md5$POST'pass'; $result =...

Openfiler 2.3 (Auth Bypass) Remote Password Change Exploit

Exploit for unknown platform in category web applications ========================================================== Openfiler 2.3 Auth Bypass Remote Password Change Exploit ========================================================== Exploit code PoC for OpenFiler 2.3 current by just a nonroot use...

BibCiter 1.4 Multiple SQL Injection Vulnerabilities

No description provided by source. BibCiter 1.4 Multiple SQL Injection Vulnerability Author: nuclear site: http://bibciter.sourceforge.net/ vuln: http://localhost/path/projects.php?idp=-721 UNION SELECT @@version%23 http://localhost/path/contacts.php?idc=-1 UNION SELECT @@version%23...

Flexphplink 0.0.x Authentication Bypass

Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms: Flexphplink Pro Version: 0.0.7 Download: http://www.china-on-site.com/flexphplink/downloads.html Bug In \admin\usercheck.php $sql = "select username,adminid from linkexadmin where username='$checkuser' and...

Flexphpsite 0.0.1 - Authentication Bypass

Flexphpsite 0.0.1 - Authentication Bypass Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms: Flexphpsiteen Version: 0.0.1 Download: http://www.china-on-site.com/flexphpsite/downloads.html Bug In \admin\usercheck.php $sql = "select username,adminid from...

CVE-2008-5695

wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manageoptions and uploadfiles capabilities to execute arbitrary code by uploading a PHP script and adding this...

SlimCMS <= 1.0.0 (edit.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl =starting -------------------------------------------------------- SlimCMS = 1.0.0 edit.php Remote SQL Injection Exploit -------------------------------------------------------- by athos - stakerathotmaildotit download on sourceforge File edit.php...

SlimCMS 1.0.0 - 'edit.php' SQL Injection

!/usr/bin/perl =starting -------------------------------------------------------- SlimCMS 2 114. $query = "UPDATE pages SET title = '".$POST'pageTitle'."', content = '". striptagsstripslashes$POST'cmsText',$allowedTags."' WHERE ID = ".$GET'pageID'; 115. mysqlquery$query; 116. //$successfulyUpdate...

Simple Document Management System 1.1.4 - Authentication Bypass

Simple Document Management System 1.1.4 - Authentication Bypass SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login...

e107 < 0.7.13 - 'usersettings.php' Blind SQL Injection

Author: GiReX Homepage: http://girex.altervista.org Date: 19/10/2008 CMS: e107 URL: http://e107.org/ Note: Works regardless of php.ini settings magicquotes, registerglobals.. Attenction: This exploit was written for educational purpose. Use it at your own risk. Author will be not responsible for...

mantis-exec.txt

?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...

Mic_blog 0.0.3 - SQL Injection Privilege Escalation

Micblog 0.0.3 - SQL Injection Privilege Escalation !/usr/bin/php -q ?php errorreporting0; iniset"defaultsockettimeout",5; / Micblog v0.0.3 Multiple Remote Exploit ------------------------------------------------------------- Discovered By StAkeR aka athos - StAkeRathotmaildotit Discovered On...

NewLife Blogger 3.0 - Insecure Cookie Handling / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NewLife Blogger eNYe-Sec - www.enye-sec.org Cookie format is: nlb3=7::96e79218965eb72c92a549dd5a330112 nlb3=iduser::md5 pass --Bug -- 143. function checkLogin 144. // loing check 145. if isset $COOKIE'nlb3' 146. $dat...

stash103exp.txt

!/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl Gnix http://gnix.netsons.org This exploit use an SQL Injection in the file admin/login.php to bypass the login, and then an SQL Injection in the admin/news.php to extract all the users info. Note: password are crypted with md5...

Stash 1.0.3 (SQL) User Credentials Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================== Stash 1.0.3 SQL User Credentials Disclosure Exploit ===================================================== !/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl This...