Section: .. / 0805-exploits /
| /// File Name: |
repaironline-admin.txt |
Description:
|
Repair Online version 1.2 suffers from a create administrator vulnerability.
| | Author: | unohope | | Homepage: | http://www.chroot.org/ | | File Size: | 1577 | | Last Modified: | May 27 18:17:32 2008 |
| MD5 Checksum: | df32b73380f2b8ae762fd7853cff0951 |
|
| /// File Name: |
blackbook-xss.txt |
Description:
|
BlackBook version 1.0 suffers from multiple cross site scripting vulnerabilities.
| | Author: | IRCRASH | | Homepage: | http://ircrash.com/ | | File Size: | 1573 | | Last Modified: | May 2 15:19:56 2008 |
| MD5 Checksum: | 285c67d71992e75fb3a8e3946ba1ad57 |
|
| /// File Name: |
zina-traverse.txt |
Description:
|
Zina version 1.0rc3 suffers from remote directory traversal and cross site scripting vulnerabilities.
| | Author: | IRCRASH | | Homepage: | http://ircrash.com/ | | File Size: | 1566 | | Last Modified: | May 27 18:04:12 2008 |
| MD5 Checksum: | 2f25c48b67a63660b624dac6bf293c21 |
|
| /// File Name: |
ajclassifieds-sql.txt |
Description:
|
AJ Classifieds 2008 suffers from a remote SQL injection vulnerability in index.php.
| | Author: | t0pp8uzz | | File Size: | 1562 | | Last Modified: | May 12 10:46:18 2008 |
| MD5 Checksum: | 269788aea5798db728097ce1c7ab5c03 |
|
| /// File Name: |
eqdkp-bypass.txt |
Description:
|
EQDKP version 1.3.2f authentication bypass proof of concept exploit.
| | Author: | vortfu | | File Size: | 1545 | | Last Modified: | May 13 11:13:10 2008 |
| MD5 Checksum: | fe7b232aa60e6af31f20bdfe14a8ecdf |
|
| /// File Name: |
wpfile-exec.txt |
Description:
|
Wordpress versions 2.5.1 and below offer the ability to execute arbitrary php code via the administrative functionality. This is a bit obvious to anyone who has used Wordpress installations, but I guess it is useful to note.
| | Author: | CWH Underground | | Homepage: | http://www.citecclub.org/ | | File Size: | 1542 | | Last Modified: | May 19 21:27:36 2008 |
| MD5 Checksum: | 91f0bd753f04c8747f2146e8008d8ed3 |
|
| /// File Name: |
chicomas204-xss.txt |
Description:
|
Chicomas CMS version 2.0.4 suffers from a cross site scripting vulnerability.
| | Author: | IRCRASH | | Homepage: | http://ircrash.com/ | | File Size: | 1526 | | Last Modified: | May 2 15:26:06 2008 |
| MD5 Checksum: | 7838ce43bdbea1052d5a8fab75d4d3a0 |
|
| /// File Name: |
maiangreeting-sqlxss.txt |
Description:
|
Maian Greeting version 1.2 suffers from cross site scripting and SQL injection vulnerabilities.
| | Author: | IRCRASH | | Homepage: | http://ircrash.com/ | | File Size: | 1517 | | Last Modified: | May 5 13:25:11 2008 |
| MD5 Checksum: | 43cb2a4040a8ad2100b0bb47d7ca5082 |
|
| /// File Name: |
maianmusic-sqlxss.txt |
Description:
|
Maian Music version 1.1 suffers from cross site scripting and SQL injection vulnerabilities.
| | Author: | IRCRASH | | Homepage: | http://ircrash.com/ | | File Size: | 1517 | | Last Modified: | May 5 13:26:28 2008 |
| MD5 Checksum: | 32b69e13c40619b4b7ab984c60a8a620 |
|
| /// File Name: |
maiansupport-xss.txt |
Description:
|
Maian Support version 1.3 suffers from cross site scripting vulnerabilities.
| | Author: | IRCRASH | | Homepage: | http://ircrash.com/ | | File Size: | 1515 | | Last Modified: | May 5 13:23:51 2008 |
| MD5 Checksum: | 4bc00d4c9dd63806c30fdd9e4648899b |
|
| /// File Name: |
campusbb-multi.txt |
Description:
|
Campus Bulletin Board version 3.4 suffers from SQL injection and cross site scripting vulnerabilities.
| | Author: | unohope | | Homepage: | http://www.chroot.org/ | | File Size: | 1500 | | Last Modified: | May 27 18:16:11 2008 |
| MD5 Checksum: | 1683e78b258f8878266fde50da633721 |
|
| /// File Name: |
rgboard-rfixss.txt |
Description:
|
Rgboard versions 3.0.12 and below suffer from remote file inclusion and cross site scripting vulnerabilities.
| | Author: | e.wiZz! | | File Size: | 1500 | | Last Modified: | May 15 03:42:51 2008 |
| MD5 Checksum: | f28af15ada7cfa6dd19a7611e4129ee5 |
|
| /// File Name: |
linkspile-sql.txt |
Description:
|
Linkspile suffers from a remote SQL injection vulnerability in link.php.
| | Author: | HaCkeR_EgY | | Homepage: | http://www.PaL-HaCker.com/ | | File Size: | 1497 | | Last Modified: | May 15 01:06:08 2008 |
| MD5 Checksum: | 24c9cae18ccfe87aa50764ad041ad946 |
|
| /// File Name: |
shadertv-sql.txt |
Description:
|
Shader TV Beta suffers from multiple SQL injection vulnerabilities allowing for login bypass and more.
| | Author: | U238 | | Homepage: | http://noexec.blogspot.com/ | | File Size: | 1476 | | Last Modified: | May 9 13:35:06 2008 |
| MD5 Checksum: | 9f14c2db07c26bca40e8b991829c03ee |
|
| /// File Name: |
azuresites-sql.txt |
Description:
|
AzureSites CMS suffers from insecure cookie handling and SQL injection vulnerabilities.
| | Author: | Lidloses_Auge | | File Size: | 1474 | | Last Modified: | May 31 15:30:25 2008 |
| MD5 Checksum: | 3513c24689e3199ef778f5b611d771fd |
|
| /// File Name: |
meltingice-user.txt |
Description:
|
MeltingIce File System versions 1.0 and below remote arbitrary add user exploit.
| | Author: | t0pp8uzz | | File Size: | 1438 | | Last Modified: | May 19 19:06:21 2008 |
| MD5 Checksum: | ddce149abab8ef391e9e450779603c5c |
|
| /// File Name: |
internetphotoshow-cookie.txt |
Description:
|
Internet Photoshow Special Edition suffers from an insecure cooking handling vulnerability that allows for arbitrary administrative access.
| | Author: | t0pp8uzz | | File Size: | 1430 | | Last Modified: | May 15 03:36:26 2008 |
| MD5 Checksum: | 9c65fb8fb64e4c7c2e5da154b8c156a5 |
|
| /// File Name: |
activekb-cookie.txt |
Description:
|
ActiveKB versions 1.5 and below suffer from an insecure cooking handling vulnerability that allows for arbitrary administrative access.
| | Author: | t0pp8uzz | | File Size: | 1427 | | Last Modified: | May 15 03:35:30 2008 |
| MD5 Checksum: | 2e810d72d6b158782557b88d1ffe1399 |
|
| /// File Name: |
entertainment-sql.txt |
Description:
|
EntertainmentScript suffers from a remote SQL injection vulnerability in play.php.
| | Author: | Mr.SQL | | Homepage: | http://www.pal-hacker.com/ | | File Size: | 1427 | | Last Modified: | May 20 16:27:04 2008 |
| MD5 Checksum: | 8b3a6bea1ce491c8aa5612c5c1c898b2 |
|
| /// File Name: |
xomol-bypasslfi.txt |
Description:
|
Xomol CMS version 1 suffers from login bypass and local file inclusion vulnerabilities.
| | Author: | DNX | | File Size: | 1418 | | Last Modified: | May 27 18:14:03 2008 |
| MD5 Checksum: | 5d8b146c72fb0490ce1882fbcc954ee7 |
|
| /// File Name: |
miniweb-sql.txt |
Description:
|
Miniweb version 2.0 suffers from a SQL injection vulnerability in index.php.
| | Author: | HaCkeR_EgY | | Homepage: | http://www.PaL-HaCker.com/ | | File Size: | 1408 | | Last Modified: | May 6 16:08:19 2008 |
| MD5 Checksum: | 7a8625138872d6a89dbcdf25987cc428 |
|
| /// File Name: |
ajdating-sql.txt |
Description:
|
AJ Dating version 1.0 suffers from a remote SQL injection vulnerability in view_profile.php.
| | Author: | t0pp8uzz | | File Size: | 1407 | | Last Modified: | May 12 10:47:16 2008 |
| MD5 Checksum: | 6ff250e2852d1741513ab401f4d86cac |
|
| /// File Name: |
admidio-disclose.txt |
Description:
|
Admidio version 1.4.8 suffers from a remote file disclosure vulnerability.
| | Author: | n3v3rh00d | | Homepage: | http://forum.antichat.ru/ | | File Size: | 1398 | | Last Modified: | May 9 20:04:34 2008 |
| MD5 Checksum: | fb96b4a0cd332e49bb1509f593db6916 |
|
| /// File Name: |
flashblog-sql.txt |
Description:
|
FlashBlog suffers from a SQL injection vulnerability.
| | Author: | HER0 | | Homepage: | http://www.domteam.info/ | | File Size: | 1394 | | Last Modified: | May 29 13:38:30 2008 |
| MD5 Checksum: | cb896c8afa3e26c4760e63ca8c95533c |
|
|
|
|
|