Lucene search
+L

766 matches found

zdt
zdt
added 2018/10/17 12:0 a.m.28 views

Time and Expense Management System 3.0 - CSRF (Add Admin) Vulnerability

Exploit for php platform in category web applications Exploit Title: Time and Expense Management System 3.0 - Cross-Site Request Forgery Add Admin Exploit Author: Ihsan Sencan Vendor Homepage: http://www.initechs.com/ Software Link: http://sourceforge.net/projects/tems/files/latest Version: 3.0...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/10/17 12:0 a.m.94 views

Time and Expense Management System 3.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Time and Expense Management System 3.0 - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-10-17 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.initechs.com/ Software Link: http://sourceforge.net/projects/tems/files/latest Version: 3.0 Category: Webapps Tested on:...

5.3AI score
SaveExploits0
zdt
zdt
added 2018/10/15 12:0 a.m.19 views

Academic Timetable Final Build 7.0b - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications Exploit Title: Academic Timetable Final Build 7.0b - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://geoffpartridge.net/ Software Link:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/10/15 12:0 a.m.537 views

Academic Timetable Final Build 7.0b - Cross-Site Request Forgery (Add Admin)

Exploit Title: Academic Timetable Final Build 7.0b - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://geoffpartridge.net/ Software Link: https://sourceforge.net/projects/timetableacademic/files/latest/download Version: 7.0a-7.0b...

5.3AI score
SaveExploits0
zdt
zdt
added 2018/10/05 12:0 a.m.30 views

Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Request Forgery (Add Admin) Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Request Forgery Add Admin Author: Cakes Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Home/detail/id/74.html Tested Version: RTK...

0.4AI score
SaveExploits0
exploitpack
exploitpack
added 2018/10/05 12:0 a.m.30 views

Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Request Forgery (Add Admin)

Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Request Forgery Add Admin Exploit Title: Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Request Forgery Add Admin Author: Cakes Discovery Date: 2018-10-01 Vendor Homepage: http://www.netis-systems.com Software Link:...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/10/05 12:0 a.m.27 views

Netis ADSL Router DL4322D RTK 2.1.1 Cross Site Request Forgery

Exploit Title: Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Request Forgery Add Admin Author: Cakes Discovery Date: 2018-10-01 Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Home/detail/id/74.html Tested Version: RTK 2.1.1 Tested on OS: Kali Linux CV...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/10/05 12:0 a.m.32 views

Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Request Forgery Add Admin Author: Cakes Discovery Date: 2018-10-01 Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Home/detail/id/74.html Tested Version: RTK 2.1.1 Tested on OS: Kali Linux CV...

5.3AI score
SaveExploits0
zdt
zdt
added 2018/08/28 12:0 a.m.49 views

RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for hardware platform in category web applications Exploit Title: RICOH MP C4504ex Printer - Cross-Site Request Forgery Add Admin Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...

0.7AI score0.02505EPSS
SaveExploits5
zdt
zdt
added 2018/08/28 12:0 a.m.37 views

Gleez CMS 1.2.0 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications Exploit Title: Gleez CMS 1.2.0 - Cross-Site Request Forgery Add Admin Exploit Author: GunEggWang Vendor Homepage: https://gleezcms.org/ Software Link: https://github.com/gleez/cms Version: 1.2.0 CVE : CVE-2018-15845 Description: There is a CSR...

0.2AI score0.02331EPSS
SaveExploits4
exploitpack
exploitpack
added 2018/08/27 12:0 a.m.64 views

RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin)

RICOH MP C4504ex Printer - Cross-Site Request Forgery Add Admin Exploit Title: RICOH MP C4504ex Printer - Cross-Site Request Forgery Add Admin Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...

6.8CVSS0.5AI score0.02505EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2018/08/27 12:0 a.m.50 views

RICOH MP C4504ex Cross Site Request Forgery

Exploit Title: RICOH MP C4504ex Printer - Cross-Site Request Forgery Add Admin Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...

0.7AI score0.02505EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2018/08/27 12:0 a.m.63 views

Gleez CMS 1.2.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Gleez CMS 1.2.0 - Cross-Site Request Forgery Add Admin Date: 2018-08-24 Exploit Author: GunEggWang Vendor Homepage: https://gleezcms.org/ Software Link: https://github.com/gleez/cms Version: 1.2.0 CVE : CVE-2018-15845 Description: There is a CSRF vulnerability that can add an...

8.8CVSS7.9AI score0.02331EPSS
SaveExploits4
Exploit DB
Exploit DB
added 2018/08/24 12:0 a.m.63 views

Vox TG790 ADSL Router - Cross-Site Request Forgery (Add Admin)

Title: Vox TG790 ADSL Router - Cross-Site Request Forgery Add Admin Author: Cakes Exploit Date: 2018-08-01 Vendor: Vox Telecom Link: https://www.vox.co.za/ Firmware Version: 6.2.W.1 CVE: N/A Description Due to improper session management low privilege users are able to create administrator accoun...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/08/06 12:0 a.m.48 views

onArcade 2.4.2 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Cross-Site Request Forgery Add Admin Google Dork: Powered by onArcade v2.4.2 Date: 2018/August/4 Author: r3m0t3nu11Zero-way Software Link: "http://www.onarcade.com" Version: "Uptodate" the appilication is vulnerable to CSRF attack No CSRF token in place meaning that if an admin use...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2018/08/06 12:0 a.m.32 views

onArcade 2.4.2 - Cross-Site Request Forgery (Add Admin)

onArcade 2.4.2 - Cross-Site Request Forgery Add Admin Exploit Title: Cross-Site Request Forgery Add Admin Google Dork: Powered by onArcade v2.4.2 Date: 2018/August/4 Author: r3m0t3nu11Zero-way Software Link: "http://www.onarcade.com" Version: "Uptodate" the appilication is vulnerable to CSRF atta...

0.4AI score
SaveExploits0
zdt
zdt
added 2018/08/06 12:0 a.m.68 views

onArcade 2.4.2 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications Exploit Title: Cross-Site Request Forgery Add Admin Google Dork: Powered by onArcade v2.4.2 Author: r3m0t3nu11Zero-way Software Link: "http://www.onarcade.com" Version: "Uptodate" the appilication is vulnerable to CSRF attack No CSRF token in...

0.1AI score
SaveExploits0
CNVD
CNVD
added 2018/07/25 12:0 a.m.6 views

BageCMS Cross-Site Request Forgery Vulnerability

BageCMS is a cross-platform content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in the index.php?r=admini/admin/create URL in BageCMS version 3.1.3. A remote attacker can exploit the vulnerability to add a backend administrator account...

8.8CVSS8.8AI score0.00523EPSS
SaveExploits1References1
Prion
Prion
added 2018/07/24 4:29 p.m.10 views

Cross site request forgery (csrf)

xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account...

6.8CVSS8.5AI score0.00494EPSS
SaveExploits1References1Affected Software1
zdt
zdt
added 2018/07/03 12:0 a.m.41 views

DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications...

1.9AI score
SaveExploits0
Rows per page
Query Builder