PT-2012-3636

Name of the Vulnerable Software and Affected Versions Wolf CMS versions 0.75 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the username, useremail, or userusername parameters in the wolfcms/admin/user/add endpoint. Recommendations For version...

CVE-2012-1898: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 useremail, or 3 userusername parameters...

RV Article Publisher - Cross-Site Request Forgery

RV Article Publisher - Cross-Site Request Forgery Exploit Title: RV Article publisher CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

CVE-2011-5074

Multiple cross-site request forgery CSRF vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary script via 1 userprofileedit.p...

KubeBlog Cross Site Request Forgery

======================================================================================== | Title : KubeBlog XSRF Vuln. | Author : The.Morpheus | email : [email protected] | Home : http://www.spyturks.com Date : 03.05.2010 Download : http://scripti.org/indir.php?id=167 | Script : Copyright ©...

Internet Explorer Remote Code Execution - Remote User Add Exploit

Exploit for unknown platform in category remote exploits ================================================================= Internet Explorer Remote Code Execution - Remote User Add Exploit ================================================================= Exploit Title: Internet Explorer 6/7 Remot...

Microsoft Internet Explorer 67 - Remote Code Execution (Remote User Add)

Microsoft Internet Explorer 67 - Remote Code Execution Remote User Add Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use...

Microsoft Internet Explorer 6 / 7 Add User Exploit

Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use Socket; use IO::Socket; print "\n"; print "800008 8 \n"; print "8 e eeeee...

Microsoft Internet Explorer 6/7 - Remote Code Execution (Remote User Add)

Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use Socket; use IO::Socket; print "\n"; print "800008 8 \n"; print "8 e eeeee...

Microsoft Internet Explorer wshom.ocx Code Execution

Exploit Title: IE wshom.ocx Run ActiveX Remote Code Execution add admin user Date: 22/01/2010 Author: Stack Version: ALL Tested on: winsp2 arg1="cmd /c net user username password /add && net localgroup Administrateurs username /add" target.run arg1...

CVE-2009-1733

CVE-2009-1733 describes a CSRF vulnerability in IPplan 4.91a that can allow an attacker to hijack administrator authentication to perform actions such as changing passwords and adding or deleting users, via unknown vectors. The affected software is IPplan (web admin interface), with the underlyin...

CVE-2009-1733

Cross-site request forgery CSRF vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that 1 change the password, 2 add users, or 3 delete users via unknown vectors...