604 matches found
Prozilla Hosting Index (directory.php cat_id) SQL Injection Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV88$2008 ----------------------------------------------------------------------------------------- ECHOADV88$2008 Prozilla Hosting Index directory.php catid Blind Sql...
pollbooth20-sql.txt
Pollbooth v2.0 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 WEBSiTE: http://www.xcorpitx-hack.com/Forum/ BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "pollBooth.php?op=results"pollID EXPLOiT :...
Moderate: Red Hat Security Advisory: gnome-screensaver security update
An updated gnome-screensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux FasTrack 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gnome-screensaver is the GNOME project's official screen saver program. A...
PunBB口令重置弱随机数绕过安全限制漏洞
BUGTRAQ ID: 27908 PunBB是一款基于PHP的论坛程序。 PunBB的口令重置功能实现上存在漏洞，远程攻击者可能利用此漏洞在特定条件重置用户的口令。 如果用户忘记了口令的话，可使用PunBB的口令重置功能重置。在请求口令重置后，论坛会向用户发送一封邮件，包含有一个新的随机口令以及激活链接，用户必须点击这个链接才能使口令更改生效。...
2WIRE Routers - H04_POST Access Validation
2WIRE Routers - H04POST Access Validation source: https://www.securityfocus.com/bid/27516/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage this...
ProfileCMS <= 1.0 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= ProfileCMS = 1.0 id Remote SQL Injection Vulnerability ========================================================= \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / /...
CVE-2007-5828
Cross-site request forgery CSRF vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CS...
Oblog blog system vulnerabilities and use(eat)-vulnerability warning-the black bar safety net
Vulnerabilities platform: the Oblog blog system Platform version: The through eat Vulnerability name: password retrieve Harm degree:★★★☆☆ Oblog blog system password retrieve function there is a serious design bug. Using this vulnerability, intruders can be through your own structure form changes...
CVE-2003-1483
FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access...
CVE-2007-5619
Unspecified vulnerability in VMware Server before 1.0.4 causes user passwords to be recorded in cleartext in server logs, which might allow local users to gain privileges...
CVE-2007-5619
Unspecified vulnerability in VMware Server before 1.0.4 causes user passwords to be recorded in cleartext in server logs, which might allow local users to gain privileges...
CVE-2007-5619
Unspecified vulnerability in VMware Server before 1.0.4 causes user passwords to be recorded in cleartext in server logs, which might allow local users to gain privileges...
CVE-2004-2708
Gyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext in its configuration file, enabling an attacker with access to the file to obtain user passwords. This vulnerability is associated with CVE-2004-2708 and is corroborated by multiple sources in the connected documents (Red Hat, CV...
IBM Lotus Notes information leak
Administrator can enable debugging function to log all user's passwords...
[Full-disclosure] heise Security: Password exposure in Lotus Notes
Excerpt from: http://www.heise-security.co.uk/news/92958 ------ Password exposure in Lotus Notes A debug function in version 5 and up of Lotus Notes can be used to write a file containing the new password in plain text when a user password is changed. This function has been designed to bring more...
LBS blog sql注射[All version]
No description provided by source. '============================================================================ '使用说明： ' 在命令提示符下： ' cscript.exe lbsblog.vbs 要攻击的网站的博客路径 有效的文章id 要破解的博客用户密码 '如： ' cscript.exe lbsblog.vbs www.xxxx.com/blog/ 1 1 ' by loveshell.netB.C.T...
Buddy Zone 1.5 - 'view_sub_cat.php?cat_id' SQL Injection
--==+================================================================================+==-- --==+ Buddy Zone Version 1.5 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...
xoops121-blindsql.txt
XOOPS Module resmanager //'=============================================================================================== //'Script Name: XOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page :...
Moodle <= 1.5.2 (moodledata) Remote Session Disclosure Vulnerability
No description provided by source. --/ INTRODUCTION -- / Advisory : MOODLE = 1.5.2 user password read out Release Date : 17. March 2007 Application : Moodle.org is a course management system CMS : to help educators create effective online learning communities. Impact : read out user account...
jgbbs-sql.txt
JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit Type : SQL Injection Release Date : 2007-03-13 Product / Vendor : JGBBS Is a Tree-style Online Forum System http://sourceforge.net/projects/jgbbs/ Bug : http://localhost/script/search.asp?author=-SQL Inj.-&bid=0 SQL Injection Exploi...