exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Trash-80

ZH2005-13SA.txt

Posted Jun 18, 2005

Authored by Trash-80

SQL injection, input tampering, and direct database access vulnerabilities exist in the (i)Site web site management system.

tags | exploit, web, vulnerability, sql injection

SHA-256 | 09529e884c047a980f6de88ce4553d0f442307b555559fde43d45d3f1dd2dfb5

Download | Favorite | View

ZH2003-12SA.txt

Posted Jul 24, 2003

Authored by Trash-80 | Site zone-h.org

PHP-G

tags | exploit, remote, php, info disclosure

SHA-256 | 078015488d26f1dd993259eac78f9ecdbd1e53a886fe906982d804667e0be8e6

Download | Favorite | View

ZH2003-11SA.txt

Posted Jul 18, 2003

Authored by Trash-80 | Site zone-h.org

Zone-H Security Advisory ZH2003-11SA - Elite News version 1.0.0.0-1.0.0.3 Beta allows direct access to various system files which enables an attacker to retrieve the administrator login name, then utilize that name on another page to set a cookie that will be referenced by yet another page that allows an attacker to post as the administrator.

tags | exploit

SHA-256 | 15b0010175329a204e9968c5e50f2759f6d246f310258aa395f5fc303d0bc6e8

Download | Favorite | View