Lucene search
K

766 matches found

exploitpack
exploitpack
added 2018/07/02 12:0 a.m.10 views

DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin)

DAMICMS 6.0.0 - Cross-Site Request Forgery Add Admin history.pushState'', '', '/'...

0.2AI score
Exploits0
Packet Storm
Packet Storm
added 2018/07/02 12:0 a.m.28 views

DAMICMS 6.0.0 Cross Site Request Forgery

history.pushState'', '', '/' a " /...

0.3AI score
Exploits0
Exploit DB
Exploit DB
added 2018/07/02 12:0 a.m.23 views

DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin)

history.pushState'', '', '/'...

7.4AI score
Exploits0
seebug.org
seebug.org
added 2018/06/29 12:0 a.m.24 views

BEESCMS 4.0 - Cross-Site Request Forgery (Add Admin)(CVE-2018-12739)

history.pushState'', '', '/'...

0.7AI score0.02385EPSS
Exploits6
seebug.org
seebug.org
added 2018/06/29 12:0 a.m.36 views

RabbitMQ Web Management < 3.7.6 - Cross-Site Request Forgery (Add Admin)

Add RabbitMQ Admin window.onload = rabbit.submit...

0.6AI score
Exploits0
Exploit DB
Exploit DB
added 2018/06/28 12:0 a.m.44 views

BEESCMS 4.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: A CSRF vulnerability exists in BEESCMSV4.0: The administrator can be added arbitrarily. Date: 2018-06-25 Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9226389.html Software Link: http://www.beescms.com/ Version: BEESCMS - V4.0 CVE : CVE-2018-12739 A CSRF...

8.8CVSS8.8AI score0.02385EPSS
Exploits6
0day.today
0day.today
added 2018/06/25 12:0 a.m.63 views

Intex Router N-150 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for hardware platform in category web applications Exploit Title:​​ Intex Router N-150 - Cross-Site Request Forgery Add Admin Exploit Author: Navina Asrani Version: N-150 Category: Router Firmware 1. Description The firmware allows malicious request to be executed without verifying source...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2018/06/25 12:0 a.m.64 views

Intex Router N-150 - Cross-Site Request Forgery (Add Admin)

Exploit Title:​​ Intex Router N-150 - Cross-Site Request Forgery Add Admin Date: 2018-06-23 Exploit Author: Navina Asrani Version: N-150 CVE : N/A Category: Router Firmware 1. Description The firmware allows malicious request to be executed without verifying source of request. This leads to...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2018/06/18 12:0 a.m.18 views

RabbitMQ Web Management 3.7.6 - Cross-Site Request Forgery (Add Admin)

RabbitMQ Web Management 3.7.6 - Cross-Site Request Forgery Add Admin Exploit Title: RabbitMQ Web Management Add RabbitMQ Admin window.onload = rabbit.submit...

0.2AI score
Exploits0
Exploit DB
Exploit DB
added 2018/06/18 12:0 a.m.116 views

RabbitMQ Web Management &lt; 3.7.6 - Cross-Site Request Forgery (Add Admin)

Exploit Title: RabbitMQ Web Management Add RabbitMQ Admin window.onload = rabbit.submit...

7.4AI score
Exploits0
0day.today
0day.today
added 2018/06/03 12:0 a.m.76 views

GreenCMS 2.3.0603 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications Exploit Title: GreenCMS v2.3.0603 CSRF vulnerability add admin Exploit Author: xichao Vendor Homepage: https://github.com/GreenCMS/GreenCMS Software Link: https://github.com/GreenCMS/GreenCMS Version: v2.3.0603 CVE : CVE-2018-11671 An issue wa...

0.1AI score0.02513EPSS
Exploits5
OSV
OSV
added 2018/04/19 8:29 a.m.1 views

CVE-2018-10223

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/adminmanage/add.html...

6.8CVSS5.8AI score0.00497EPSS
Exploits1References2
0day.today
0day.today
added 2018/04/10 12:0 a.m.34 views

KYOCERA Net Admin 3.4 - Cross Site Request Forgery - Add Admin Exploit

Exploit for linux platform in category web applications Vendor: KYOCERA Corporation Product https://global.kyocera.com Affected version: 3.4.0906 Summary: KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2018/04/10 12:0 a.m.28 views

WUZHI CMS 4.1.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: WUZHI CMS 4.1.0 CSRF vulnerability add admin account Date: 2018-04-10 Exploit Author: taoge Vendor Homepage: https://github.com/wuzhicms/wuzhicms Software Link: https://github.com/wuzhicms/wuzhicms Version: 4.1.0 CVE : CVE-2018-9926 An issue was discovered in WUZHI CMS...

8.8CVSS8.8AI score0.03094EPSS
Exploits5
exploitpack
exploitpack
added 2018/04/09 12:0 a.m.31 views

KYOCERA Net Admin 3.4 - Cross-Site Request Forgery (Add Admin)

KYOCERA Net Admin 3.4 - Cross-Site Request Forgery Add Admin Vendor: KYOCERA Corporation Product https://global.kyocera.com Affected version: 3.4.0906 Summary: KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and...

0.2AI score
Exploits0
Exploit DB
Exploit DB
added 2018/04/09 12:0 a.m.38 views

KYOCERA Net Admin 3.4 - Cross-Site Request Forgery (Add Admin)

Vendor: KYOCERA Corporation Product https://global.kyocera.com Affected version: 3.4.0906 Summary: KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and uncomplicated control to handle a fleet for up to 10,000...

7.4AI score
Exploits0
Zero Science Lab
Zero Science Lab
added 2018/04/07 12:0 a.m.764 views

KYOCERA Net Admin 3.4 CSRF Add Admin Exploit

Summary KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and uncomplicated control to handle a fleet for up to 10,000 devices. Tasks that used to require multiple programs or walking to each printer can now be...

8.8CVSS5.7AI score0.00266EPSS
Exploits2
0day.today
0day.today
added 2018/01/24 12:0 a.m.35 views

Photography CMS 1.0 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications New Admin Username: Password: Confirm Password: Email: $"ekleabi".live'click',function $.ajax type: "POST", url: "http://ronnieswietek.com/cc/clients/resources/ajax/ajaxnewadmin.php", data: username:$".efe username".val,...

6.8CVSS8.7AI score0.01412EPSS
Exploits4
exploitpack
exploitpack
added 2018/01/23 12:0 a.m.17 views

Photography CMS 1.0 - Cross-Site Request Forgery (Add Admin)

Photography CMS 1.0 - Cross-Site Request Forgery Add Admin New Admin Username: Password: Confirm Password: Email: $"ekleabi".live'click',function $.ajax type: "POST", url: "http://ronnieswietek.com/cc/clients/resources/ajax/ajaxnewadmin.php", data: username:$".efe username".val, password1:$".efe...

6.8CVSS0.9AI score0.01412EPSS
Exploits4
Exploit DB
Exploit DB
added 2018/01/23 12:0 a.m.33 views

Photography CMS 1.0 - Cross-Site Request Forgery (Add Admin)

New Admin Username: Password: Confirm Password: Email: $"ekleabi".live'click',function $.ajax type: "POST", url: "http://ronnieswietek.com/cc/clients/resources/ajax/ajaxnewadmin.php", data: username:$".efe username".val, password1:$".efe password1".val, password2:$".efe password2".val, email:$".e...

8.8CVSS9AI score0.01412EPSS
Exploits4
Rows per page
Query Builder