Free Monthly Websites 2.0 - Admin Password Change

========================================================================================== Title : Free Monthly Websites 2.0 Administrator Remote Password Change Date : 10/04/2013 Name : Free Monthly Websites Affected Version : 2.0 Vendor : http://www.freemonthlywebsites2.com/ Category : Web...

SA-CONTRIB-2012-161 - Webform CiviCRM Integration - Access Bypass

Webform CiviCRM integration allows you to expose contact data via Webforms. Depending on what fields you have exposed in your form, this may include personal information such as birthdate, phone number, email address, etc. Proper permission settings are important to keep this information from...

PG Portal Pro - Cross-Site Request Forgery

PG Portal Pro - Cross-Site Request Forgery Exploit Title: PG Portal pro CSRF Vulnerability Author: Noxious Team: WE SECRET Gr33tz: Fox link:http://www.hotscripts.com/listing/pg-portal-pro/ CSRF Change Password New Password: Confirm New Password:...

PG Portal Pro - Cross-Site Request Forgery

Exploit Title: PG Portal pro CSRF Vulnerability Author: Noxious Team: WE SECRET Gr33tz: Fox link:http://www.hotscripts.com/listing/pg-portal-pro/ CSRF Change Password New Password: Confirm New Password:...

PG Portal Pro Cross Site Request Forgery

Exploit Title: PG Portal pro CSRF Vulnerability Author: Noxious Team: WE SECRET Gr33tz: Fox link:http://www.hotscripts.com/listing/pg-portal-pro/ CSRF Change Password New Password: Confirm New Password:...

iLister CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: iLister CSRF Author: Jonturk75 Vendor or Software Link: http://www.worksforweb.com/classifieds-software/iLister/ Category:: webapps Demo : http://demo.worksforweb.com/iLister/admin/ Greetz: Inj3ct0r Exploit DataBase 1337day.com...

Ritim | Clever Content CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Ritim | Clever Content CSRF Author: Jonturk75 Vendor or Software Link: http://ritim.info/ Category:: webapps Demo : http://demo.ritim.info/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com 0day.today 2018-04-01...

Wolf CMS 0.75 Persistent Cross Site Scripting

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms al...

ICLowBidAuction CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: ICLowBidAuction CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/bpower-unique-low-bid-auction-lowest-bid-auction/27183/ Category:: webapps Demo :...

Zazavi <=1.2.1 Multiple (XSRF + Shell Upload) Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Cotonti 0.9.2 Cross Site Request Forgery / Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

NucleusCMS 3.64 Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Web@All 1.1 Remote Admin Settings Change Exploit

=========================================== Web@all Date: 27/12/2010 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- Application Info: web@all 1.1 web@all is a CMS which is not similar to general CMS, you can build it easyly by yourself...

Cross-site Request Forgery (CSRF) Vulnerabilities in Kandidat CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Kandidat CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Kandidat CMS 1.1 The vulnerability exists due to insufficient validation of the request...

Skybluecanvas 1.1-r248 - Cross-Site Request Forgery

Skybluecanvas 1.1-r248 - Cross-Site Request Forgery 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 1 +Exploit Title: Skybluecanvas.v1.1-r248 CSRF vulnirabilitie 0 0 +Date: 022/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link:...

Mail support request accepts any e-mail address

The SupportUtility allows the user to enter an arbitrary e-mail address to send a copy of the e-mail to. This issue removes the option for users to enter an e-mail address to CC. This issue also introduces a flag that prevents the TO address from being changed through the web interface. By defaul...

Mini Hosting Panel XSRF

----------------------------------------------------------------------------------------------- Title: mini Hosting Panel XSRF Change Admin Settings Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009...

mini Hosting Panel XSRF Change Admin Settings

Exploit for unknown platform in category web applications ============================================= mini Hosting Panel XSRF Change Admin Settings ============================================= -----------------------------------------------------------------------------------------------...

mini Hosting Panel - Cross-Site Request Forgery (Change Admin Settings)

mini Hosting Panel - Cross-Site Request Forgery Change Admin Settings ----------------------------------------------------------------------------------------------- Title: mini Hosting Panel XSRF Change Admin Settings Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December...

mini Hosting Panel - Cross-Site Request Forgery (Change Admin Settings)

----------------------------------------------------------------------------------------------- Title: mini Hosting Panel XSRF Change Admin Settings Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009...