Free Monthly Websites 2.0 - Admin Password Change

Free Monthly Websites 2.0 - Admin Password Change ========================================================================================== Title : Free Monthly Websites 2.0 Administrator Remote Password Change Date : 10/04/2013 Name : Free Monthly Websites Affected Version : 2.0 Vendor :...

SA-CONTRIB-2012-161 - Webform CiviCRM Integration - Access Bypass

Webform CiviCRM integration allows you to expose contact data via Webforms. Depending on what fields you have exposed in your form, this may include personal information such as birthdate, phone number, email address, etc. Proper permission settings are important to keep this information from...

CVE-2012-5705

Cross-site scripting XSS vulnerability in the settings page admin/settings/hotblocks in the Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to inject arbitrary web script or HTML via the "block names."...

PT-2012-6086

Name of the Vulnerable Software and Affected Versions Drupal Hotblocks module versions 6.x-1.x before 6.x-1.8 Description A cross-site scripting XSS issue exists in the settings page of the Hotblocks module for Drupal, specifically at the 'admin/settings/hotblocks' endpoint. This allows remote...

CVE-2012-5705: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the settings page admin/settings/hotblocks in the Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to inject arbitrary web script or HTML via the "block names."...

PG Portal Pro - Cross-Site Request Forgery

PG Portal Pro - Cross-Site Request Forgery Exploit Title: PG Portal pro CSRF Vulnerability Author: Noxious Team: WE SECRET Gr33tz: Fox link:http://www.hotscripts.com/listing/pg-portal-pro/ CSRF Change Password New Password: Confirm New Password:...

PG Portal Pro - Cross-Site Request Forgery

Exploit Title: PG Portal pro CSRF Vulnerability Author: Noxious Team: WE SECRET Gr33tz: Fox link:http://www.hotscripts.com/listing/pg-portal-pro/ CSRF Change Password New Password: Confirm New Password:...

PG Portal Pro Cross Site Request Forgery

Exploit Title: PG Portal pro CSRF Vulnerability Author: Noxious Team: WE SECRET Gr33tz: Fox link:http://www.hotscripts.com/listing/pg-portal-pro/ CSRF Change Password New Password: Confirm New Password:...

iLister CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: iLister CSRF Author: Jonturk75 Vendor or Software Link: http://www.worksforweb.com/classifieds-software/iLister/ Category:: webapps Demo : http://demo.worksforweb.com/iLister/admin/ Greetz: Inj3ct0r Exploit DataBase 1337day.com...

Ritim | Clever Content CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Ritim | Clever Content CSRF Author: Jonturk75 Vendor or Software Link: http://ritim.info/ Category:: webapps Demo : http://demo.ritim.info/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com 0day.today 2018-04-01...

Wolf CMS 0.75 Persistent Cross Site Scripting

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms al...

ICLowBidAuction CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: ICLowBidAuction CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/bpower-unique-low-bid-auction-lowest-bid-auction/27183/ Category:: webapps Demo :...

CVE-2012-0990: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attackers to hijack the authentication of administrators for requests that modify account settings such as the administrator password or email via certain Settings parameters...

PT-2012-2995

Name of the Vulnerable Software and Affected Versions DClassifieds version 0.1 final Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that modify account settings, such as the administrator password or email, via...

Zazavi <=1.2.1 Multiple (XSRF + Shell Upload) Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Cotonti 0.9.2 Cross Site Request Forgery / Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

NucleusCMS 3.64 Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Web@All 1.1 Remote Admin Settings Change Exploit

=========================================== Web@all Date: 27/12/2010 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- Application Info: web@all 1.1 web@all is a CMS which is not similar to general CMS, you can build it easyly by yourself...

Cross-site Request Forgery (CSRF) Vulnerabilities in Kandidat CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Kandidat CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Kandidat CMS 1.1 The vulnerability exists due to insufficient validation of the request...

Skybluecanvas 1.1-r248 - Cross-Site Request Forgery

Skybluecanvas 1.1-r248 - Cross-Site Request Forgery 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 1 +Exploit Title: Skybluecanvas.v1.1-r248 CSRF vulnirabilitie 0 0 +Date: 022/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link:...