WebSPELL <= 4.01.02 (picture.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications =============================================================== WebSPELL = 4.01.02 picture.php File Disclosure Vulnerability =============================================================== WebSPELL = 4.01.02 picture.php Remote File...

WebSPELL 4.01.02 - picture.php File Disclosure

WebSPELL 4.01.02 - picture.php File Disclosure WebSPELL = 4.01.02 picture.php Remote File Disclosure Vulnerability Discovered by: Trex Visit: www.Trex-Online.net / www.UnderGround.ag Comment: Happy easter! / \ / \ / / / \ \ / \ /\ // / GIVE ME A CARROT OR I WILL \ \O O/ \ BLOW UP YOUR HOUSE / /...

WebSPELL 4.01.02 - 'picture.php' File Disclosure

WebSPELL = 4.01.02 picture.php Remote File Disclosure Vulnerability Discovered by: Trex Visit: www.Trex-Online.net / www.UnderGround.ag Comment: Happy easter! / \ / \ / / / \ \ / \ /\ // / GIVE ME A CARROT OR I WILL \ \O O/ \ BLOW UP YOUR HOUSE / / ^ \ / / / // / \ // \ ///\ Vulnerability 1:...

webSPELL PHP Code Execution-vulnerability warning-the black bar safety net

Summary "webSPELL is a free Content Management System CMS for clans and gaming communities, providing all needed features like forums, gallery, clanwar system and co." There is a PHP code execution vulnerability in webSPELL. Credit: The information has been provided by milw0rm. The original artic...

webSPELL &lt;= 4.01.02 Multiple Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perlbr / use LWP::UserAgent;br / use Getopt::Long;br / br / if!$ARGV3br / br / print " \'/ ";br / print " -.- ";br / print "...

webSPELL 4.01.02 - PHP Remote Code Execution

webSPELL 4.01.02 - PHP Remote Code Execution !/usr/bin/php URL: http://www.acid-root.new.fr/ ----------------------------------------------------------------------- Usage: $argv0 -url -file Options Params: -url For example http://victim.com/webspell/ -file The file you wanna upload c99shell.php...

webSPELL <= 4.01.02 Remote PHP Code Execution Exploit

Exploit for unknown platform in category web applications ===================================================== webSPELL -file Options Params: -url For example http://victim.com/webspell/ -file The file you wanna upload c99shell.php... Options: -prefix Table prefix default=webs -upmatch The match...

webSPELL 4.01.02 - PHP Remote Code Execution

!/usr/bin/php URL: http://www.acid-root.new.fr/ ----------------------------------------------------------------------- Usage: $argv0 -url -file Options Params: -url For example http://victim.com/webspell/ -file The file you wanna upload c99shell.php... Options: -prefix Table prefix default=webs...

Authentication flaw

webSPELL 4.0, and possibly later versions, allows remote attackers to bypass authentication via a wsauth cookie, a different vulnerability than CVE-2006-4782...

CVE-2007-1154

SQL injection vulnerability in webSPELL allows remote attackers to execute arbitrary SQL commands via a wsauth cookie, a different vulnerability than CVE-2006-4782...

CVE-2007-1155

Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad feature. NOTE: this issue may be an administrative feature, in which case this CVE may be REJECTED...

CVE-2007-1160

webSPELL 4.0, and possibly later versions, allows remote attackers to bypass authentication via a wsauth cookie, a different vulnerability than CVE-2006-4782...

Sql injection

SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2007-1019, CVE-2006-5388, and CVE-2006-4783...

Unrestricted file upload

Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad feature. NOTE: this issue may be an administrative feature, in which case this CVE may be REJECTED...

CVE-2007-1154

SQL injection vulnerability in webSPELL allows remote attackers to execute arbitrary SQL commands via a wsauth cookie, a different vulnerability than CVE-2006-4782...

CVE-2007-1163

SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2007-1019, CVE-2006-5388, and CVE-2006-4783...

Sql injection

SQL injection vulnerability in webSPELL allows remote attackers to execute arbitrary SQL commands via a wsauth cookie, a different vulnerability than CVE-2006-4782...

CVE-2007-1160

webSPELL 4.0, and possibly later versions, allows remote attackers to bypass authentication via a wsauth cookie, a different vulnerability than CVE-2006-4782...

CVE-2007-1163

SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2007-1019, CVE-2006-5388, and CVE-2006-4783...

webSPELL 4.01.02 - Multiple SQL Injections

webSPELL 4.01.02 - Multiple SQL Injections !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print "\n \'/ "; print "\n -.- "; print "\n -------------------oOO------OOo--------------------"; print "\n | webSPELL "; print "\n! Example: perl ws.pl 127.0.0.1 /webspell/ -0 -id 1"; print...