Bigace_2.7.3 CSRF Change Admin Password POC

Exploit for php platform in category web applications =========================================== Bigace2.7.3 CSRF Change Admin Password POC =========================================== !/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software lin...

Bigace 2.7.3 Cross Site Request Forgery

!/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7.3 Software detail: BIGACE - Dynamic Web CMS - is a free,...

BigACE 2.7.3 - Cross-Site Request Forgery (Change Admin Password)

BigACE 2.7.3 - Cross-Site Request Forgery Change Admin Password !/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7...

R7-0037: SAP BusinessObjects Axis2 Default Admin Password

R7-0037: SAP BusinessObjects Axis2 Default Admin Password October 13th, 2010 Description: The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone with access to the Axis2 port...

Travel Portal Script - Cross-Site Request Forgery (Admin Password Change)

Travel Portal Script - Cross-Site Request Forgery Admin Password Change ===================================================== Travel PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Exploited by KnocKout Travel Portal - Remote Admin Password Change CSRF Exploited by KnocKout...

Event Ticket Portal Script Cross Site Request Forgery

=========================================================== Event Ticket PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Event Ticket PORTAL - Admin Password Chage CSRF Exploited by KnocKout Username: New Password: input type="subm...

Event Ticket Portal Script Admin Password Change - Cross-Site Request Forgery

Event Ticket Portal Script Admin Password Change - Cross-Site Request Forgery =========================================================== Event Ticket PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Event Ticket PORTAL - Admin Password Chage CSRF Exploited by KnocKout Username...

Travel Portal Cross Site Request Forgery

===================================================== Travel PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Exploited by KnocKout Travel Portal - Remote Admin Password Change CSRF Exploited by KnocKout Admin Name:admin New Password:input type="password" name="password" size="...

Event Ticket Portal Script Admin Password Change - Cross-Site Request Forgery

=========================================================== Event Ticket PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Event Ticket PORTAL - Admin Password Chage CSRF Exploited by KnocKout Username: New Password: /table...

Travel Portal Script - Cross-Site Request Forgery (Admin Password Change)

===================================================== Travel PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Exploited by KnocKout Travel Portal - Remote Admin Password Change CSRF Exploited by KnocKout Admin Name:admin New Password: input type="submit" name="...

Event Ticket PORTAL <= Admin Password Change (CSRF) Exploit

Exploit for php platform in category web applications =========================================================== Event Ticket PORTAL Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'...

Travel PORTAL <= Admin Password Change (CSRF) Exploit

Exploit for php platform in category web applications ===================================================== Travel PORTAL Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm KnocKout...

Rapid7 Security Advisory 37

R7-0037: SAP BusinessObjects Axis2 Default Admin Password October 13th, 2010 Description: The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone with access to the Axis2 port...

SAP BusinessObjects Axis2 Default Admin Password

Overview The Axis2 component of SAP BusinessObjects contains a default administrator account and password. Description The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone...

Webspell 4.2.1 search-injection vulnerability and fix-vulnerability warning-the black bar safety net

Webspell 4.2.1 procedures exist to search-typeSQL injectioncould obtain the administrator user password Search injected into the page: http://localhost/webspell/asearch.php?site=search&table=user&column=nickname&exact=true&identifier=userID&searchtemp=searchuser&search= Storm the Admin Password...

Tiki Wiki CMS Groupware 5.2 Cross Site Request Forgery

...

CMSimple XSRF Vulnerability

Exploit for php platform in category web applications =========================== CMSimple XSRF Vulnerability =========================== - Title : CMSimple XSRF Vulnerability - Affected Version :CMSimple $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2...

CMSimple - Cross-Site Request Forgery

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2 = $GLOBALS$k1.''.$k2; $GLOBALS$a$k1$k2 = stsl$GLOBALS$a$k1$k2; if $k1.$k2 == 'editorbuttons'$text .=...

CMSimple - Cross-Site Request Forgery

CMSimple - Cross-Site Request Forgery ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2 = $GLOBALS$k1.''.$k2; $GLOBALS$a$k1$k2 = stsl$GLOBALS$a$k1$k2; if $k1.$k2 ==...

Month Of Abysssec Undisclosed Bugs - CMSimple 3.2

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2 = $GLOBALS$k1.''.$k2; $GLOBALS$a$k1$k2 = stsl$GLOBALS$a$k1$k2; if $k1.$k2 == 'editorbuttons'$text .=...