BloofoxCMS - '/admin/index.php' Cross-Site Request Forgery (Add Admin)

source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include vulnerability Exploiting these issues could allow an attacke...

Auto Classifieds Script 2.0添加管理员CSRF漏洞

No description provided by source. Auto Classifieds Script v2.0 - CSRF Vulnerabilty Add Admin ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

PHPJabbers Property Listing Script 2.0 - Cross-Site Request Forgery (Add Admin)

PHPJabbers Property Listing Script 2.0 - Cross-Site Request Forgery Add Admin Property Listing Script V2.0 - Add Admin CSRF Vulnerability ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ ....

PHPJabbers Property Listing Script 2.0 - Cross-Site Request Forgery (Add Admin)

Property Listing Script V2.0 - Add Admin CSRF Vulnerability ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/property-listing-script/ === Exploit ===...

Auto Classifieds Script 2.0 - Cross-Site Request Forgery (Add Admin)

Auto Classifieds Script 2.0 - Cross-Site Request Forgery Add Admin Auto Classifieds Script v2.0 - CSRF Vulnerabilty Add Admin ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

Auto Classifieds Script 2.0 - Cross-Site Request Forgery (Add Admin)

Auto Classifieds Script v2.0 - CSRF Vulnerabilty Add Admin ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/preview/auto-classifieds-script/ ===...

Auto Classifieds Script 2.0 - Add Admin CSRF Vulnerability

Auto Classifieds Script version 2.0 suffers from a cross site request forgery vulnerability. Auto Classifieds Script v2.0 - CSRF Vulnerabilty Add Admin ==================================================================== .:. Author : HackXBack .:. Contact : email protected .:. Home :...

Auto Classifieds Script 2.0 Cross Site Request Forgery

Auto Classifieds Script v2.0 - CSRF Vulnerabilty Add Admin ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/preview/auto-classifieds-script/ .:. Test...

EZGenerator - Local File Disclosure Cross-Site Request Forgery

EZGenerator - Local File Disclosure Cross-Site Request Forgery source: https://www.securityfocus.com/bid/64740/info EZGenerator is prone to a local file-disclosure vulnerability and a cross-site request-forgery vulnerability. An attacker may leverage these issues to perform unauthorized actions i...

EZGenerator Cross Site Request Forgery / File Disclosure

EZGenerator – Local File Disclosure/Admin Data/CSRF Vulnerability ================================================================= .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Dork : inurl:”utils.php?action=...

Social Site Generator 2.2 - CSRF Add Admin Exploit

Exploit for php platform in category web applications Exploit Title: social generator Remote Add Admin Exploit Date: 02/05/2013 Author: Fallaga Script url:www.socialsitegeneratorscript.com Version: 2.2 Tested on: Windows CVE : Dork: inurl:myprofile.php?userid=MTM= Username: Password:...

Rite CMS 1.0.0 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: RiteCMS multiple vulnerabilities Date: 2013 30 July Exploit Author: Yashar shahinzadeh Credit goes for: ha.cker.ir Vendor Homepage: http://ritecms.com/ Tested on: Linux & Windows, PHP 5.2.9 Affected Version : 1.0.0 Contacts: http://Twitter.com/YShahinzadeh , http://y-shahinzadeh.ir...

Windu CMS 2.2 Cross Site Request Forgery

Windu CMS 2.2 CSRF Add Admin Exploit input type="hidden" name="em...

Moa Gallery 1.2.6 Multiple Vulnerabilities

Exploit for php platform in category web applications !/usr/bin/php Exploit Title : Moa Gallery 1.2.6 Multiple Vulnerabilities Date : 5/17/2013 Author: Slotleet Slotleet GMAIL com https://fb.com/Slotleet Vendor Homepage: http://www.moagallery.net/ Version affected : 1.2.6 Tested on: WIN 7 Xd4rk...

Ajax Availability Calendar 3.x - Multiple Vulnerabilities

Ajax Availability Calendar 3.x - Multiple Vulnerabilities Ajax Availability Calendar 3.X.X Multiple Vulnerabilties ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://www.ajaxavailabilitycalendar.com/ .:. Dork : intitle:"Aja...

Social Site Generator 2.2 - Cross-Site Request Forgery (Add Admin)

Exploit Title: social generator Remote Add Admin Exploit Date: 02/05/2013 Author: Fallaga Script url:www.socialsitegeneratorscript.com Version: 2.2 Tested on: Windows CVE : Dork: inurl:myprofile.php?userid=MTM= Username: Password:...

Weboptima CMS Add Administrator / Shell Upload

cs 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

OSClass 3.0.2 CSRF/FPD Vulnerabilities

---- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Auxilium PetRatePro - Multiple Vulnerabilities

Exploit Title: Auxilium PetRatePro Multiple Vulnerabilities Date: 14/09/2012 Author: DaOne @LibyanCA Software Link: http://www.auxiliumsoftware.com Google Dork: "N/A" 1-Remote Add Admin: Create New Administrator Username Password Name Email Address 2-SQL Injection viewcomments.php parameter phid...

Auxilium PetRatePro - Multiple Vulnerabilities

Auxilium PetRatePro - Multiple Vulnerabilities Exploit Title: Auxilium PetRatePro Multiple Vulnerabilities Date: 14/09/2012 Author: DaOne @LibyanCA Software Link: http://www.auxiliumsoftware.com Google Dork: "N/A" 1-Remote Add Admin: Create New Administrator Username Password Name Email Address...