Lucene search
+L

766 matches found

Exploit DB
Exploit DB
added 2018/07/02 12:0 a.m.24 views

DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin)

history.pushState'', '', '/'...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2018/07/02 12:0 a.m.12 views

DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin)

DAMICMS 6.0.0 - Cross-Site Request Forgery Add Admin history.pushState'', '', '/'...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/07/02 12:0 a.m.32 views

DAMICMS 6.0.0 Cross Site Request Forgery

history.pushState'', '', '/' a " /...

0.3AI score
SaveExploits0
seebug.org
seebug.org
added 2018/06/29 12:0 a.m.30 views

BEESCMS 4.0 - Cross-Site Request Forgery (Add Admin)(CVE-2018-12739)

history.pushState'', '', '/'...

0.7AI score0.02385EPSS
SaveExploits6
seebug.org
seebug.org
added 2018/06/29 12:0 a.m.40 views

RabbitMQ Web Management < 3.7.6 - Cross-Site Request Forgery (Add Admin)

Add RabbitMQ Admin window.onload = rabbit.submit...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/06/28 12:0 a.m.53 views

BEESCMS 4.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: A CSRF vulnerability exists in BEESCMSV4.0: The administrator can be added arbitrarily. Date: 2018-06-25 Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9226389.html Software Link: http://www.beescms.com/ Version: BEESCMS - V4.0 CVE : CVE-2018-12739 A CSRF...

8.8CVSS7.9AI score0.02385EPSS
SaveExploits6
Exploit DB
Exploit DB
added 2018/06/25 12:0 a.m.66 views

Intex Router N-150 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Intex Router N-150 - Cross-Site Request Forgery Add Admin Date: 2018-06-23 Exploit Author: Navina Asrani Version: N-150 CVE : N/A Category: Router Firmware 1. Description The firmware allows malicious request to be executed without verifying source of request. This leads to arbitra...

5.3AI score
SaveExploits0
zdt
zdt
added 2018/06/25 12:0 a.m.67 views

Intex Router N-150 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for hardware platform in category web applications Exploit Title:​​ Intex Router N-150 - Cross-Site Request Forgery Add Admin Exploit Author: Navina Asrani Version: N-150 Category: Router Firmware 1. Description The firmware allows malicious request to be executed without verifying source...

0.4AI score
SaveExploits0
exploitpack
exploitpack
added 2018/06/18 12:0 a.m.21 views

RabbitMQ Web Management 3.7.6 - Cross-Site Request Forgery (Add Admin)

RabbitMQ Web Management 3.7.6 - Cross-Site Request Forgery Add Admin Exploit Title: RabbitMQ Web Management Add RabbitMQ Admin window.onload = rabbit.submit...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/06/18 12:0 a.m.117 views

RabbitMQ Web Management < 3.7.6 - Cross-Site Request Forgery (Add Admin)

Exploit Title: RabbitMQ Web Management Add RabbitMQ Admin window.onload = rabbit.submit...

5.3AI score
SaveExploits0
zdt
zdt
added 2018/06/03 12:0 a.m.82 views

GreenCMS 2.3.0603 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications Exploit Title: GreenCMS v2.3.0603 CSRF vulnerability add admin Exploit Author: xichao Vendor Homepage: https://github.com/GreenCMS/GreenCMS Software Link: https://github.com/GreenCMS/GreenCMS Version: v2.3.0603 CVE : CVE-2018-11671 An issue wa...

0.1AI score0.02513EPSS
SaveExploits5
OSV
OSV
added 2018/04/19 8:29 a.m.3 views

CVE-2018-10223

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/adminmanage/add.html...

6.8CVSS5.8AI score0.00497EPSS
SaveExploits1References2
zdt
zdt
added 2018/04/10 12:0 a.m.38 views

KYOCERA Net Admin 3.4 - Cross Site Request Forgery - Add Admin Exploit

Exploit for linux platform in category web applications Vendor: KYOCERA Corporation Product https://global.kyocera.com Affected version: 3.4.0906 Summary: KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/04/10 12:0 a.m.34 views

WUZHI CMS 4.1.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: WUZHI CMS 4.1.0 CSRF vulnerability add admin account Date: 2018-04-10 Exploit Author: taoge Vendor Homepage: https://github.com/wuzhicms/wuzhicms Software Link: https://github.com/wuzhicms/wuzhicms Version: 4.1.0 CVE : CVE-2018-9926 An issue was discovered in WUZHI CMS...

8.8CVSS7.9AI score0.03094EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2018/04/09 12:0 a.m.40 views

KYOCERA Net Admin 3.4 - Cross-Site Request Forgery (Add Admin)

Vendor: KYOCERA Corporation Product https://global.kyocera.com Affected version: 3.4.0906 Summary: KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and uncomplicated control to handle a fleet for up to 10,000...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2018/04/09 12:0 a.m.35 views

KYOCERA Net Admin 3.4 - Cross-Site Request Forgery (Add Admin)

KYOCERA Net Admin 3.4 - Cross-Site Request Forgery Add Admin Vendor: KYOCERA Corporation Product https://global.kyocera.com Affected version: 3.4.0906 Summary: KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and...

0.2AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2018/04/07 12:0 a.m.774 views

KYOCERA Net Admin 3.4 CSRF Add Admin Exploit

Summary KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and uncomplicated control to handle a fleet for up to 10,000 devices. Tasks that used to require multiple programs or walking to each printer can now be...

8.8CVSS5.7AI score0.00276EPSS
SaveExploits2
zdt
zdt
added 2018/01/24 12:0 a.m.41 views

Photography CMS 1.0 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications New Admin Username: Password: Confirm Password: Email: $"ekleabi".live'click',function $.ajax type: "POST", url: "http://ronnieswietek.com/cc/clients/resources/ajax/ajaxnewadmin.php", data: username:$".efe username".val,...

6.8CVSS8.7AI score0.01385EPSS
SaveExploits4
exploitpack
exploitpack
added 2018/01/23 12:0 a.m.33 views

Photography CMS 1.0 - Cross-Site Request Forgery (Add Admin)

Photography CMS 1.0 - Cross-Site Request Forgery Add Admin New Admin Username: Password: Confirm Password: Email: $"ekleabi".live'click',function $.ajax type: "POST", url: "http://ronnieswietek.com/cc/clients/resources/ajax/ajaxnewadmin.php", data: username:$".efe username".val, password1:$".efe...

6.8CVSS0.9AI score0.01385EPSS
SaveExploits4
Exploit DB
Exploit DB
added 2018/01/23 12:0 a.m.37 views

Photography CMS 1.0 - Cross-Site Request Forgery (Add Admin)

New Admin Username: Password: Confirm Password: Email: $"ekleabi".live'click',function $.ajax type: "POST", url: "http://ronnieswietek.com/cc/clients/resources/ajax/ajaxnewadmin.php", data: username:$".efe username".val, password1:$".efe password1".val, password2:$".efe password2".val, email:$".e...

8.8CVSS7.9AI score0.01385EPSS
SaveExploits4
Rows per page
Query Builder