MidiCMS-WB 2011 Shell Upload / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

MidiCMS-WB (2011) Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2009-4927

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...

Authentication flaw

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...

CVE-2009-4927

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...

CVE-2009-4927

CVE-2009-4927 affects WB News 2.1.2. An authentication bypass is possible by modifying the WBNEWS cookie (set to 1), allowing remote attackers to gain administrative access. The NVD entry and related records confirm a network-exposed vulnerability with a base CVSS v2 score of 7.5 (HIGH) and impac...

CVE-2009-4927: Improper Authentication

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name and possibly 2 message parameters. NOTE: some of these details are obtained from third party information...

CVE-2010-1712

Multiple cross-site scripting XSS vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name and possibly 2 message parameters. NOTE: some of these details are obtained from third party information...

CVE-2010-1712

The CVE-2010-1712 entry documents Cross-Site Scripting (XSS) in Webmobo WB News 2.3.3, specifically in base/Comments.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the name parameter and possibly the message parameter, enabling script execution in the vi...

CVE-2010-1712: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name and possibly 2 message parameters. NOTE: some of these details are obtained from third party information...

wb news (webmobo) 2.3.3 - Persistent Cross-Site Scripting

Title: WB News Webmobo 2.3.3 Stored XSS Vendor: http://www.webmobo.org/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability44.htm Thanks: r3dm0v3 r3dm0v3atymail.com,...

WB News 2.1.2 - Insecure Cookie Handling

WB News 2.1.2 - Insecure Cookie Handling ----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.webmobo.com/downloads/ Software: wb news 2.1.2 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa : Serra7 merra7 , koulchi mderra...

WB News 2.1.1 config[installdir] Remote File Inclusion Vulnerability

No description provided by source. -----------------:Remote File Include:----------------- ------------------------------------------------------- script:wb news v2.1.1 ------------------------------------------------------------------ download from:http://www.webmobo.com/downloads/...

WB News 2.1.1 - config[installdir] Remote File Inclusion

WB News 2.1.1 - configinstalldir Remote File Inclusion -----------------:Remote File Include:----------------- ------------------------------------------------------- script:wb news v2.1.1 ------------------------------------------------------------------ download...

WB News 2.1.1 Remote File Inclusion

-----------------:Remote File Include:----------------- ------------------------------------------------------- script:wb news v2.1.1 ------------------------------------------------------------------ download from:http://www.webmobo.com/downloads/...

WB News 2.1.1 config[installdir] Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== WB News 2.1.1 configinstalldir Remote File Inclusion Vulnerability ==================================================================== -----------------:Remote File...

WB News 2.1.1 - config[installdir] Remote File Inclusion

-----------------:Remote File Include:----------------- ------------------------------------------------------- script:wb news v2.1.1 ------------------------------------------------------------------ download from:http://www.webmobo.com/downloads/...

WB News v2.0.X Remote File include ..

Hello WB News v2.0.X Remote File include .. tested on 2.0.1 Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] search.php?configinstalldir=http://www.soqor.net/index/? archive.php?configinstalldir=http://www.soqor.net/index/?...

CVE-2009-0294

Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...