228 matches found
Diferior CMS 8.03 - Multiple Cross-Site Request Forgery Vulnerabilities
Diferior CMS 8.03 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Tue 13 Jul 2010 11:50:32 AM EEST Vendor: http://diferior.com/ Download: http://diferior.com/postfiles/news/diferior-8-03-released/Diferiorv8.03.tar.gz --- -= CSRF PoC 1 - Change Admin Password =- Diferior CMS 8.03...
Diferior CMS 8.03 - Multiple Cross-Site Request Forgery Vulnerabilities
Date: Tue 13 Jul 2010 11:50:32 AM EEST Vendor: http://diferior.com/ Download: http://diferior.com/postfiles/news/diferior-8-03-released/Diferiorv8.03.tar.gz --- -= CSRF PoC 1 - Change Admin Password =- Diferior CMS 8.03 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Change...
Diferior CMS 8.03 Multiple CSRF Vulnerabilities
Exploit for php platform in category web applications =============================================== Diferior CMS 8.03 Multiple CSRF Vulnerabilities =============================================== Date: Tue 13 Jul 2010 11:50:32 AM EEST Vendor: http://diferior.com/ Download:...
Sphider Script - Remote Code Execution
Sphider Script - Remote Code Execution ======================================================================= Sphider Script Remote Code Execution ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...
Gravity Board X 2.0 Beta (Public Release 3) - SQL Injection
Gravity Board X 2.0 Beta Public Release 3 - SQL Injection !/usr/bin/perl Exploit Title: Gravity Board X 2.0 BETA Public Release 3 SQL INJECTION Date: 26.02.2010 Author: Ctacok Software Link: http://www.gravityboardx.com/ Version: 2.0 BETA Public Release 3 Tested on: Windows SP 3 Code : exploit co...
Sourcebans <= 1.4.2 Arbitrary Change Admin Email Vulnerability
Exploit for unknown platform in category web applications...
Sourcebans <= 1.4.2 Arbitrary Change Admin Email Vulnerability
No description provided by source. Sourcebans PHP sb-callback.php Author: Mr. Anonymous ------ Vendor:http://www.sourcebans.com Affected Versions: = 1.4.2 ----- Exploit sb-callback lines 185-204: ------------- function ChangeEmail$aid, $email ...SNIP... $GLOBALS'db'-Execute"UPDATE...
Host Directory PRO 2.1.0 Remote Change Admin Password Exploit
No description provided by source. titlechange password Host Directory PRO 2.1.0 /title body bgcolor="000000" trtd class="setting" form name="config" action="http://demo-host-directory-pro.phphostdirectoryscript.com/admin/config" method="post" h4Configuration/h4 table tr tdfont color="FFFFFF"Web...
Host Directory PRO 2.1.0 - Remote Change Admin Password
Host Directory PRO 2.1.0 - Remote Change Admin Password change password Host Directory PRO 2.1.0 Configuration Web Interface Password Admin Email Receive Authorize.Net On Off Authorize login Authorize transactionKey /fo...
Host Directory PRO 2.1.0 Remote Change Admin Password Exploit
Exploit for unknown platform in category web applications ============================================================= Host Directory PRO 2.1.0 Remote Change Admin Password Exploit ============================================================= change password Host Directory PRO 2.1.0 Configuratio...
Authentication flaw
profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters...
CVE-2009-1637
The CVE-2009-1637 entry concerns profile.php in Simple Customer 1.3, where administrative authentication is not required. This allows remote attackers to modify the admin email address and password by passing email and password parameters. The NVD data lists a CVSS v2 base score of 6.4 (Network a...
Job Script 2.0 Arbitrary Change Admin Password Exploit
No description provided by source. head titleJob Script V2.0 - Job Board Software change pasword admin /title /head /head body div id="page" div id="middle" div class="center" table width=100% cellspacing=15 tr td width="223"badmin :/b/[email protected]/td /tr /table body div id="page" div...
Job Script 2.0 - Arbitrary Change Admin Password
Job Script V2.0 - Job Board Software change pasword admin admin :[email protected] Change password Cod3d By:TiGeR-dZ ;Script:Job Script V2.0 - Job Board Software Download:http://www.jobscript.net/job-board-software/ Mail:[email protected] milw0rm.com 2009-05-07...
CRE Loaded 6.2 - 'products_id' SQL Injection
+-------------------------------------+ + Homepage: http://www.creloaded.com/ + Product: CRE Loaded v6.2 + File: productinfo.php + Parameter: productid +-------------------------------------+ + SQL Injection: +...
phpFoX 1.6.21 Cross Site Request Forgery
phpFoX Version 1.6.21 cross site request forgery exploit dork:Powered by phpFoX found by d14l greetz to:soul,marcoj,al0xyz,stefo,aljosha,sp1r1t,invisible greetz to all good people from my country croatia phpFoX Version 1.6.21 suffers from cross site request forgery which allows attacker to change...
PunBB <= 1.2.16 Blind Password Recovery Exploit
No description provided by source. ?php / Original : http://sektioneins.de/advisories/SE-2008-01.txt Thanks to Stefan Esser, here's the exploit. Team : EpiBite firefox, petit-poney, thot Nous tenons a remercier nos mamans et papas respectifs. Let's get a fu coffee ! / // conf define'URL',...
Bigware Shop 2.0 pollid Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== Bigware Shop 2.0 pollid Remote SQL Injection Vulnerability ========================================================== Bigware Shop 2.0 Bug found by D4m14n Vendor:...
Traffic Stats (referralUrl.php offset) Remote SQL Injection Vulnerbility
Exploit for unknown platform in category web applications ======================================================================== Traffic Stats referralUrl.php offset Remote SQL Injection Vulnerbility ========================================================================...
Traffic Stats - referralUrl.php?offset SQL Injection
Traffic Stats - referralUrl.php?offset SQL Injection --==+================================================================================+==-- --==+ Traffic Stats SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...