DEBIAN-CVE-2011-2522

Multiple cross-site request forgery CSRF vulnerabilities in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that 1 shut down daemons, 2 start daemons, 3 add shares, 4 remove shares, 5 add printers...

Entrack Internet admin Auth Bypass

Exploit for asp platform in category web applications Exploit Title:Entrack: Internet Admin Auth Bypass Date: 17/6/2011 Author: Angel Injection & Noor Al-Iraqia home Page: http://www.club-h.co.cc Email: Angel-Injectionathotmail.com Vendor or Software Link:n/a Version: n/a Category:: webapps Googl...

AR Infotech Admin Auth ByPass

Exploit for php platform in category web applications ---- /\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\- -/ --------------------------------|------------------------------| -/ + Exploit Title : AR Infotech Admin Auth ByPass | -/ + Date : 07 June 2011 | -/ + Author :...

SmartySolution Admin Auth ByPass

Exploit for php platform in category web applications - /\./\./\./\./\./\./\./\./\./\./\./\./\./\./\./\./\. . + Exploit Title : SmartySolution Admin Auth ByPass . + Date : 05 June 2011 . + Author : xConsoLe // Thanks to mohsan123 . + Category : WebApps . + d0rk : "by...

CORE-2010-1118: Oracle GlassFish Server Administration Console Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ Oracle GlassFish Server Administration Console Authentication Bypass 1. Advisory Information Title: Oracle GlassFish Server Administration Console Authentication Bypass...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for...

CVE-2011-1721

Cross-site request forgery CSRF vulnerability in php/partieadministrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that 1 modify passwords or 2 add new projects. NOTE: some of these details are obtained from third party...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change account privileges via an edit accesspermissions action to index.php...

CVE-2011-0642

Cross-site request forgery CSRF vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers to hijack the authentication of administrators for requests that create new users via the options action. NOTE: some of these details are obtained from third party information...

CVE-2011-0642

N-13 News CSRF vulnerability (CVE-2011-0642) affects news/admin.php in N-13 News versions 3.4, 3.7, and 4.0. The issue allows an attacker to hijack administrator sessions by forging requests that create new users via the options action. Documented impact is loss of integrity/privilege control for...

CVE-2010-3884

Cross-site request forgery CSRF vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that reset the administrative password. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that reset the administrative password. NOTE: the provenance of this information is unknown; the details are obtained solely from...

ASPMass Shopping Cart - Arbitrary File Upload / Cross-Site Request Forgery

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-30-aspmass-shopping-cart-vulnerability-file-upload-csrf/ ''' Abysssec Inc Public Advisory Title : ASPMass Shopping Cart Vulnerability File...

Authentication flaw

admin/manageusers.php in TotalCalendar 2.4 does not require administrative authentication, which allows remote attackers to change arbitrary passwords via the newPW1 and newPW2 parameters...

CVE-2009-4929

admin/manageusers.php in TotalCalendar 2.4 does not require administrative authentication, which allows remote attackers to change arbitrary passwords via the newPW1 and newPW2 parameters...

Auction_Software Script - Admin Authentication Bypass

AuctionSoftware Script - Admin Authentication Bypass 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : AuctionSoftware Script Admin Login Bypass vulnerability vendor URL :http://www.brotherscripts.com/ Price: $24.95 Author : altbta dork : "PHPAuction GPL Enhanced V2....

Auction_Software Script - Admin Authentication Bypass

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : AuctionSoftware Script Admin Login Bypass vulnerability vendor URL :http://www.brotherscripts.com/ Price: $24.95 Author : altbta dork : "PHPAuction GPL Enhanced V2.51 by AuctionCode.com"...

PT-2010-4133 · Ibm +6 · Aix +7

Name of the Vulnerable Software and Affected Versions: InterSect Alliance Snare Agent versions 3.2.3 and earlier on Solaris InterSect Alliance Snare Agent versions 3.1.7 and earlier on Windows InterSect Alliance Snare Agent versions 1.5.0 and earlier on Linux and AIX InterSect Alliance Snare Agen...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 force an admin logout, 3 change the visibility of posts, 4 remove links, and 5 change the name fields of a blog...

CVE-2010-2345

The CVE-2010-2345 entry concerns odCMS 1.06 (potentially earlier) and describes a Cross-Site Request Forgery (CSRF) that can hijack an administrator’s session to perform actions such as changing the administrative password and other unspecified requests. The linked sources in the CVE describe the...