CVE-2012-6047

CVE-2012-6047 is a CSRF vulnerability in X7 Chat

CVE-2012-6047: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php...

CLscript CMS v3.0 - Multiple Web Vulnerabilities

Document Title: =============== CLscript CMS v3.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=574 Release Date: ============= 2012-05-15 Vulnerability Laboratory ID VL-ID: ==================================== 574 Common...

PCVmedia SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability PCVmedia freegallery.php?catid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.pcvmedia.com/ Persian Gulf 4 Ever! Dork : "Website designed & developed by PCVmedia.com"...

Easy Media Script - SQL Injection

Easy Media Script - SQL Injection alert0 -== Start ==- "; $t=array"dbuser "="user","dbversion"="version","dbname "="database", "UserName "="user","Password "="pass"; foreach$t as $r=$y...

Easy Media Script SQL Injection Vulnerability

Exploit for php platform in category web applications alert0 -== Start ==- "; $t=array"dbuser "="user","dbversion"="version","dbname "="database", "UserName "="user","Password "="pass"; foreach$t as $r=$y...

Easy Media Script - SQL Injection

alert0 -== Start ==- "; $t=array"dbuser "="user","dbversion"="version","dbname "="database", "UserName "="user","Password "="pass"; foreach$t as $r=$y...

QualDev eCommerce SQL Injection

==================================================== QualDev eCommerce script SQL injection vulnerability ==================================================== Exploit Title: QualDev eCommerce script SQL injection vulnerability Vendor: http://www.qualdev.com Date: 15.12.2010 Version: all version...

Display event CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= Display event CMS SQL Injection Vulnerability ============================================= + Auth0r : Game Over + E-m41L : gameover20atlivedotcom + D0rk : inurl:index.php?action=cms.display + S-Si...

phpBazar Administrative Disclosure

===================================== phpBazar admin path discloser Vulnerability ===================================== Author :: NetSpy Group :: Aras cyber Army Email :: [email protected] Discover :: 1 july 2010 Critical Lvl :: M Publised :: 22 june 2010 vender :: n/a...

ClipBucket AdminPanel edit site Vulnerability

============================================= ClipBucket AdminPanel edit site Vulnerability ============================================= The largest Exploit Database in the world ! 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' ...

ClipBucket AdminPanel edit site Vulnerability

Exploit for php platform in category web applications ============================================= ClipBucket AdminPanel edit site Vulnerability ============================================= The largest Exploit Database in the world !...

CVE-2009-4793

The CVE-2009-4793 issue affects BandSite CMS 1.1.4, specifically the adminpanel/scripts/addphotos.php functionality. Unrestricted file upload in the addphotos action of adminpanel/index.php allows remote authenticated administrators to upload a file with an executable extension and then access it...

CVE-2009-4793: Improper Control of Generation of Code

Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite CMS 1.1.4 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension via an addphotos action to adminpanel/index.php, and then accessing the file v...

EmiratesHost Insecure Cookie Handling

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : EmiratesHost Insecure Cookie Handling Vulnerability Author: jago-dz == TEam: MEhabEL-Dz From: ALGERia EmaiL: [email protected] Software Link: http://www.dz-goal.com/up/view.php?file=a88342493d...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authentication of administrators and force a logout via adminpanel/logout.php...

CVE-2008-7056

BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain copies of the database via a direct request...

CVE-2008-7058: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authentication of administrators and force a logout via adminpanel/logout.php...

CVE-2008-7056: Undefined Security Weakness

BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain copies of the database via a direct request...

Php AdminPanel Free version 1.0.5 Remote File Disclosure Vuln

No description provided by source. Php AdminPanel Free version 1.0.5 Remote File Disclosure AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina...