CVE-2008-6912

Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/home.php...

CVE-2008-6914

Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile modification, then accessing a related file via a direct request to the file in...

Unrestricted file upload

Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile modification, then accessing a related file via a direct request to the file in...

Authentication flaw

Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/home.php...

Cross site scripting

Cross-site scripting XSS vulnerability in viewpropdetails.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary web script or HTML via the propid parameter...

CVE-2008-6913

Unrestricted file upload vulnerability in editresumenext.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile edit action, then accessing the file via a direct request to jobseekers/logos...

CVE-2008-6912

CVE-2008-6912 affects Zeeways SHAADICLONE 2.0. The vulnerability allows remote attackers to bypass authentication and gain administrative privileges by sending a direct request to two paths, notably admin/home.php. The public documents provide the attack outcome but do not detail the root cause, ...

CVE-2008-6912

Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/home.php...

CVE-2008-6914

Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile modification, then accessing a related file via a direct request to the file in...

CVE-2008-6915

CVE-2008-6915 describes a cross-site scripting (XSS) vulnerability in Zeeways ZEEPROPERTY 1.0, specifically in the view_prop_details.php component where the propid parameter can be exploited to inject arbitrary web script or HTML. The vulnerability is triggered via the propid input and could allo...

CVE-2008-6913

Unrestricted file upload vulnerability in editresumenext.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile edit action, then accessing the file via a direct request to jobseekers/logos...

CVE-2008-6913

CVE-2008-6913 : Unrestricted file upload in Zeeways ZEEJOBSITE 2.0 (editresume_next.php) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile photo and then accessing it via jobseekers/logos/. No fix/mitigation details are provi...

CVE-2008-6914

CVE-2008-6914 affects Zeeways ZEEPROPERTY 1.0. Unrestricted file upload in viewprofile.php lets remote authenticated users upload a file with an executable extension as a profile photo and later access the file via a direct request to the file in companylogo/, enabling potential code execution. R...

CVE-2008-5042

Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct request to admin/home.php...

Authentication flaw

Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct request to admin/home.php...

CVE-2008-5042

Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct request to admin/home.php...

CVE-2008-5042

Zeeways PhotoVideoTube 1.1 and earlier contains an authentication bypass vulnerability that allows remote attackers to bypass login and perform administrative tasks via a direct request to admin/home.php. This CVE (CVE-2008-5042) is documented by NVD and CVE lists, with public exploit references ...

photovideotube-bypass.txt

============================================================================== Zeeways PHOTOVIDEOTUBE v1.1 Auth Bypass Vulnerability ============================================================================== » Script : Zeeways PHOTOVIDEOTUBE v1.1 » Language: PHP » Website :...

Zeeways Shaadi Clone 2.0 Auth Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

shaadiclone-bypass.txt

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...