ScriptCase CSRF / XSS / SQL Injection

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SCRIPTCASE-PHP-WEB-TOOL-MULTIPLE-VULNERABILITIES.txt + ISR: ApparitionSec Vendor: ================== www.scriptcase.net Product: =================== ScriptCase v8.1.053, v8.1.051, v8.1.43.0...

Subrion CMS 4.0.5 - Cross-Site Request Forgery Bypass Persistent Cross-Site Scripting

Subrion CMS 4.0.5 - Cross-Site Request Forgery Bypass Persistent Cross-Site Scripting Exploit Title: Subrion CMS 4.0.5 - CSRF Bypass to Persistent XSS and Add-Admin Date: 15-10-2016 Software Link: http://www.subrion.org/download/ Vendor: http://www.subrion.org Google Dork: "Powered by Subrion CMS...

Subrion CMS 4.0.5 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: Subrion CMS 4.0.5 - CSRF Bypass to Persistent XSS and Add-Admin Date: 15-10-2016 Software Link: http://www.subrion.org/download/ Vendor: http://www.subrion.org Google Dork: "Powered by Subrion CMS" Exploit Author: Ahsan Tahir Contact: https://twitter.com/AhsanTahirAT |...

ApPHP MicroCMS 3.9.5 - Cross-Site Request Forgery (Add Admin)

Exploit Title :----------------- : ApPHP MicroCMS 3.9.5 - Cross-Site Request Forgery Add Admin Main Author :------------------------ : Besim Google Dork :---------------- : - Date :-------------------------- : 12/10/2016 Type :-------------------------- : webapps Platform : -------------------- :...

PHP Press Release - Cross-Site Request Forgery (Add Admin)

Exploit for php platform in category web applications Exploit Title : PHP Press Release - Cross-Site Request Forgery Add Admin - Super User Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software link...

PHP Press Release - Cross-Site Request Forgery (Add Admin)

PHP Press Release - Cross-Site Request Forgery Add Admin Exploit Title : PHP Press Release - Cross-Site Request Forgery Add Admin - Super User Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software...

PHP Press Release - Cross-Site Request Forgery (Add Admin)

Exploit Title : PHP Press Release - Cross-Site Request Forgery Add Admin - Super User Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software link :...

Simple PHP Blog 0.8.4 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications that will add a new user as administrator. Once exploited, the attacker can login to the admin panel http://localhost/simple/login.php using the username and the password he posted in the form. CSRF PoC Code ============= -- input type="hidden...

NUUO NVRmini 2 3.0.8 - Cross-Site Request Forgery (Add Admin)

NUUO NVRmini 2 3.0.8 - Cross-Site Request Forgery Add Admin input type="hidden" name="password2" value=...

NUUO NVRmini 2 3.0.8 - Cross-Site Request Forgery (Add Admin)

Exploit for php platform in category web applications...

NUUO NVRmini 2 3.0.8 - Cross-Site Request Forgery (Add Admin)

...

Mobiketa 1.0 - Cross-Site Request Forgery (Add Admin)

Mobiketa 1.0 - Cross-Site Request Forgery Add Admin -- + Contact: http://twitter.com/muratyilmazlarr --...

Mobiketa 1.0 - Cross-Site Request Forgery (Add Admin)

Exploit for php platform in category web applications -- + Contact: http://twitter.com/muratyilmazlarr -- 0day.today 2018-03-10...

Mobiketa 1.0 - Cross-Site Request Forgery (Add Admin)

-- + Contact: http://twitter.com/muratyilmazlarr --...

Dream Gallery 1.0 - Cross-Site Request Forgery (Add Admin)

Dream Gallery 1.0 - Cross-Site Request Forgery Add Admin...

Dream Gallery 1.0 - Cross-Site Request Forgery (Add Admin)

Exploit for php platform in category web applications 0day.today 2018-04-14...

Dream Gallery 1.0 - Cross-Site Request Forgery (Add Admin)

...

MOBOTIX Video Security Cameras - CSRF Add Admin Exploit

No description provided by source...

MOBOTIX Video Security Cameras - Cross-Site Request Forgery (Add Admin)

Exploit for hardware platform in category web applications !-- MOBOTIX Video Security Cameras CSRF Add Admin Exploit Vendor: MOBOTIX AG Product web page: https://www.mobotix.com Affected version: Model: D22M-Secure, HW: T2r1.1.AA, 520 MHz, 128 MByte RAM, SW: MX-V3.5.2.23.r3 Model: Q24M-Secure, HW...

MOBOTIX Video Security Cameras - Cross-Site Request Forgery (Add Admin)

MOBOTIX Video Security Cameras - Cross-Site Request Forgery Add Admin...