Showing 1 - 17 of 17

Files from Mark Stanislav

Stem Innovation IZON Hardcoded Password: Posted Jan 17, 2014; Authored by Mark Stanislav; Stem Innovation's IZON IP camera has hard-coded passwords that can be leveraged via both telnetd and httpd.; tags | exploit; advisories | CVE-2013-6236; SHA-256 | 7fc873d3d71731d5736ab631f76a7b61a776a31d2cb74133e26ee6c5b0ed0967; Download | Favorite | View

WordPress portable-phpMyAdmin 1.3.0 Authentication Bypass: Posted Dec 12, 2012; Authored by Mark Stanislav; WordPress portable-phpMyAdmin plugin version 1.3.0 fails to validate the existing session allowing a user to navigate directly to the interface.; tags | exploit, bypass; advisories | CVE-2012-5469; SHA-256 | 635ba61336555a6ec94b472a5ccf980487338b18f6471804097b5b53d1873419; Download | Favorite | View

phpPaleo 4.8b156 Local File Inclusion: Posted Apr 4, 2012; Authored by Mark Stanislav; phpPaleo version 4.8b156 suffers from a local file inclusion vulnerability. A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on the 'lang' GET parameter.; tags | exploit, local, php, file inclusion; advisories | CVE-2012-1671; SHA-256 | bcf4cd9e85738290d9bc0e99b776529c82d32d5ead9783d4874d3f5e03be5c75; Download | Favorite | View

Hotel Booking Portal 0.1 SQL Injection: Posted Apr 4, 2012; Authored by Mark Stanislav; Hotel Booking Portal version 0.1 suffers from a remote SQL injection vulnerability.; tags | exploit, remote, sql injection; advisories | CVE-2012-1672; SHA-256 | e5bd761b6b77d6401e0829fb292820e953061861cf27bd9e56a3a7e67b73d807; Download | Favorite | View

e-ticketing SQL Injection: Posted Apr 4, 2012; Authored by Mark Stanislav; e-ticketing suffers from a remote SQL injection vulnerability.; tags | exploit, remote, sql injection; advisories | CVE-2012-1673; SHA-256 | 266d19abefad70df6224e816a62f24eb3f623c69cc79cc28a6527b434ccb58a6; Download | Favorite | View

phpMoneyBooks 1.0.2 Local File Inclusion: Posted Mar 23, 2012; Authored by Mark Stanislav; phpMoneyBooks version 1.0.2 suffers from a local file inclusion vulnerability.; tags | exploit, local, file inclusion; advisories | CVE-2012-1669; SHA-256 | 6dc6c86f629a98762a450f97b26e5f4b93b2f042e881916b84b928ceba4cb29d; Download | Favorite | View

PHP Grade Book 1.9.4 SQL Database Export: Posted Mar 23, 2012; Authored by Mark Stanislav; PHP Grade Book version 1.9.4 suffers from an unauthenticated SQL database export vulnerability.; tags | exploit, php, sql injection; advisories | CVE-2012-1670; SHA-256 | 06099377d2ef1478efdf0d96eb23253f740de30c06fe4bb3495819bbd6f0540d; Download | Favorite | View

Andy's PHP Knowledgebase 0.95.2 SQL Injection: Posted Mar 30, 2011; Authored by Mark Stanislav; Andy's PHP Knowledgebase version 0.95.2 suffers from a remote SQL injection vulnerability.; tags | exploit, remote, php, sql injection; advisories | CVE-2011-1546; SHA-256 | ef98675a17d9e48efecc788efee692612e97e35a67ea1472dbd238994394fa08; Download | Favorite | View

Quick Polls 1.0.1 Local File Inclusion / Deletion: Posted Mar 6, 2011; Authored by Mark Stanislav; Quick Polls version 1.0.1 suffers from local file inclusion and deletion vulnerabilities.; tags | exploit, local, vulnerability, file inclusion; advisories | CVE-2011-1099; SHA-256 | 0c75e637f24d377cc23b4c6fdf6a8fa1744cf939deab78aac8640afe7c5d61b2; Download | Favorite | View

Seo Panel 2.2.0 Cross Site Scripting: Posted Jan 15, 2011; Authored by Mark Stanislav; Seo Panel suffers from a cookie-rendering persistent cross site scripting vulnerability.; tags | exploit, xss; advisories | CVE-2010-4331; SHA-256 | 946d257e463809754be32de45dca92ae5a1e14ead7ac7c8148d4119c0960b2fa; Download | Favorite | View

HyperStrike Integration With Snap Fitness SSO Bypass: Posted Dec 22, 2010; Authored by Mark Stanislav; HyperStrike Integration with Snap Fitness suffers from a SSO bypass vulnerability.; tags | exploit, bypass; SHA-256 | 151c41eb78f81331e9e4f12c66b7172b40a1360b1e03dc20e72be82940004f5e; Download | Favorite | View

Pointter PHP Content Management System 1.0 Privilege Escalation: Posted Dec 15, 2010; Authored by Mark Stanislav; A vulnerability exists in the Pointter PHP Content Management System version 1.0 authentication system which allows for administrative privileges by crafting two specific cookies with arbitrary values.; tags | exploit, arbitrary, php; advisories | CVE-2010-4332; SHA-256 | 383447dee593575552b4ff1eaf381e999b313af64904e3e28897fc874dcfacd7; Download | Favorite | View

Pointter PHP Micro-Blogging Social Network 1.8 Privilege Escalation: Posted Dec 15, 2010; Authored by Mark Stanislav; A vulnerability exists in the Pointter PHP Micro-Blogging Social Network version 1.8 authentication system which allows for administrative privileges by crafting two specific cookies with arbitrary values.; tags | exploit, arbitrary, php; advisories | CVE-2010-4333; SHA-256 | 5ed06a82856703845c31dcfc2e60d5e2c275c982d313bdc9e171cebe44ca0cc1; Download | Favorite | View

Pulse CMS Basic 1.2.8 Local File Inclusion: Posted Dec 5, 2010; Authored by Mark Stanislav; Pulse CMS Basic version 1.2.8 suffers from a local file inclusion vulnerability.; tags | exploit, local, file inclusion; advisories | CVE-2010-4330; SHA-256 | 2eb6318e893edf0dd81f3f341d56b3839e137ed0d12563b95a8d533b6d4159c9; Download | Favorite | View

Orbis CMS 1.0.2 Shell Upload: Posted Dec 1, 2010; Authored by Mark Stanislav; Orbis CMS version 1.0.2 suffers from a remote shell upload vulnerability.; tags | exploit, remote, shell; advisories | CVE-2010-4313; SHA-256 | d4b7b1878d5a8080f457e7f8608df2b81ad078416af0eabf6d752cc3cdb32eba; Download | Favorite | View

Free Simple Software SQL Injection: Posted Nov 22, 2010; Authored by Mark Stanislav; Free Simple Software version 1.0 suffers from a remote SQL injection vulnerability.; tags | exploit, remote, sql injection; advisories | CVE-2010-4298; SHA-256 | 8c1c14755b77930d4ce44955e962d90243862a56f7f17738410bb74c0b338b9b; Download | Favorite | View

WSN Links SQL Injection: Posted Nov 2, 2010; Authored by Mark Stanislav; WSN Links versions prior to 6.0.1, 5.1.51 and 5.0.81 suffer from a remote SQL injection vulnerability.; tags | exploit, remote, sql injection; advisories | CVE-2010-4006; SHA-256 | 881436ef08f0cd388fa73ef2ea6a787d03cb2c25a3015b6a944297441b172013; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days