PHP MicroCMS 1.0.1 CSRF and XSS Vulnerabilities

Exploit for php platform in category web applications Product: PHP MicroCMS Vendor: ApPHP http://www.apphp.com/ Vulnerable Version: 1.0.1 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vendor Alerted, Awaiti...

S40 CMS v.0.4.1 Change Admin Passwd CSRF Exploit

Exploit for php platform in category web applications In The Name Of GOD + Exploit Title:remote change user and password exploit + Date: 2010 + script:S40 CMS v.0.4.1 beta + Software: http://s40.biz/?p=download + Author : pentesters.ir +discovered by:ahmadbady + Contact : email protected + Websit...

S40 CMS 0.4.1 - Cross-Site Request Forgery (Change Admin Password)

In The Name Of GOD + Exploit Title:remote change user and password exploit + Date: 2010 + script:S40 CMS v.0.4.1 beta + Software: http://s40.biz/?p=download + Author : pentesters.ir +discovered by:ahmadbady + Contact : [email protected] + Website : WwW.PenTesters.IR expl: coded by ahmadbady...

S40 CMS 0.4.1 - Cross-Site Request Forgery (Change Admin Password)

S40 CMS 0.4.1 - Cross-Site Request Forgery Change Admin Password In The Name Of GOD + Exploit Title:remote change user and password exploit + Date: 2010 + script:S40 CMS v.0.4.1 beta + Software: http://s40.biz/?p=download + Author : pentesters.ir +discovered by:ahmadbady + Contact :...

Ignition 1.3 - Remote Code Execution

Ignition 1.3 - Remote Code Execution ?php / Ignition 1.3 Remote Code Execution Exploit by cOndemned download: http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz source of i-options.php 1. ?php 2. sessionstart; 3. if $POST'submit' 4. if $FH = @fopen'data/settings.php', 'w' 5...

Ignition 1.3 - Remote Code Execution

?php / Ignition 1.3 Remote Code Execution Exploit by cOndemned download: http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz source of i-options.php 1. ?php 2. sessionstart; 3. if $POST'submit' 4. if $FH = @fopen'data/settings.php', 'w' 5. @fwrite$FH, '?php $pass =...

Web@All 1.1 Remote Admin Settings Change Exploit

=========================================== Web@all Date: 27/12/2010 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- Application Info: web@all 1.1 web@all is a CMS which is not similar to general CMS, you can build it easyly by yourself...

D-Link DIR-300/320/600/615 unauthorized access

It's possible to change administration password without knowledge of old password...

shoutcaststats.v0.5 Changer Login and Pass CSRF Vulnerability

Exploit for php platform in category web applications ============================================================= shoutcaststats.v0.5 Changer Login and Pass CSRF Vulnerability ============================================================= || || | || o,7 || . o7 || 4||| ow, : / /...

Plogger Gallery 1.0 CSRF Change Admin Password

Exploit for php platform in category web applications ============================================== Plogger Gallery 1.0 CSRF Change Admin Password ============================================== ------------------------------------------------------------------------- Software : PloggerGallery...

PHPGallery 1.1.0 Cross Site Request Forgery

------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ : -------------------------------------------------------------------------...

PHPGallery 1.1.0 CSRF Vulnerability

Exploit for php platform in category web applications =================================== PHPGallery 1.1.0 CSRF Vulnerability =================================== ------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a...

Plogger Gallery 1.0 Cross Site Request Forgery

------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/ ------------------------------------------------------------------------- +---+CSRF Chang...

Plogger Gallery 1.0 - Cross-Site Request Forgery (Change Admin Password)

Plogger Gallery 1.0 - Cross-Site Request Forgery Change Admin Password ------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/...

Plogger Gallery 1.0 - Cross-Site Request Forgery (Change Admin Password)

------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/ ------------------------------------------------------------------------- +---+CSRF Chang...

PHPGallery 1.1.0 - Cross-Site Request Forgery

------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ : -------------------------------------------------------------------------...

PHPGallery 1.1.0 - Cross-Site Request Forgery

PHPGallery 1.1.0 - Cross-Site Request Forgery ------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ :...

osCommerce v2.2 CSRF Vulnerability

Exploit for php platform in category web applications ================================== osCommerce v2.2 CSRF Vulnerability ================================== Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2...

SweetRice 0.6.7 Cross Site Scripting / SQL Injection

========================================== Vulnerability ID: HTB22667 Reference: http://www.htbridge.ch/advisory/sqlinjectioninsweetricecms.html Product: SweetRice CMS Vendor: basic-cms.org http://www.basic-cms.org/ Vulnerable Version: 0.6.7 Vendor Notification: 21 October 2010 Vulnerability Type...

SweetRice 0.6.7 - Multiple Vulnerabilities

SweetRice 0.6.7 - Multiple Vulnerabilities Vulnerability ID: HTB22669 Reference: http://www.htbridge.ch/advisory/resetadminpasswordinsweetricecms.html Product: SweetRice CMS Vendor: basic-cms.org http://www.basic-cms.org/ Vulnerable Version: 0.6.7 Vendor Notification: 21 October 2010 Vulnerabilit...