CVE-2009-4349: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Matrimony Script XSRF

/\ == \ /\ \ /\ \ \ \ ================================================================ ------------------------------------------------------------------------------------------...

Matrimony Script - Cross-Site Request Forgery

Matrimony Script - Cross-Site Request Forgery /\ == \ /\ \ /\ \ \ \ ================================================================ ------...

Matrimony Script CSRF Vulnerability

No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Matrimony Script CSRF Vulnerability // Author Info x Author: bi0 x Contact: [email protected] x Thanks:...

Matrimony Script - Cross-Site Request Forgery

/\ == \ /\ \ /\ \ \ \ ================================================================ ----------------------------------------------------...

Easy Banner Pro Cross Site Request Forgery

/\ == \ /\ \ /\ \ \ \ inp...

PT-2009-4833 · Red Hat · Red Hat Jboss Enterprise Application Platform

Name of the Vulnerable Software and Affected Versions: Red Hat JBoss Enterprise Application Platform versions 4.2.0 through 4.2.0.CP07, 4.2.2GA and earlier, 4.3 versions prior to 4.3.0.CP07, 5.1.0GA and earlier Description: The issue affects the Web Console in the Application Server, allowing...

AdManagerPro CSRF Create Administrator Account

Exploit for unknown platform in category web applications ============================================== AdManagerPro CSRF Create Administrator Account ============================================== view source print? /\ == \ /\ \ /\ \ \ ...

AdManagerPro CSRF Create Administrator Account

No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + AdManagerPro - CSRF Create Administrator Account // Author Info x Author: bi0 x Contact:...

Easy Banner Pro - Cross-Site Request Forgery (Add Admin)

Easy Banner Pro - Cross-Site Request Forgery Add Admin Title: Easy Banner Pro - CSRF Create Administrator Account Date: 14/12/2009 Author: bi0 Software Link: http://scripts-gate.com/4/easy-banner-pro-banner-exchange-script.html CVE : /\ == \ /\ \ /\ \ \ \ in...

AdManagerPro - Cross-Site Request Forgery (Add Admin)

AdManagerPro - Cross-Site Request Forgery Add Admin /\ == \ /\ \ /\ \ \ \ input type="...

Easy Banner Pro - Cross-Site Request Forgery (Add Admin)

Title: Easy Banner Pro - CSRF Create Administrator Account Date: 14/12/2009 Author: bi0 Software Link: http://scripts-gate.com/4/easy-banner-pro-banner-exchange-script.html CVE : /\ == \ /\ \ /\ \ \ \ input type="hidden" name="rights" value="advertisers" CHE...

Text Exchange Pro - Cross-Site Request Forgery (Add Admin)

Title: Text Exchange Pro - CSRF Create Administrator Account Date: 14/12/2009 Author: bi0 Software Link: http://scripts-gate.com/1/textexchangescript.html CVE : /\ == \ /\ \ /\ \ \ \ input t...

Link Up Gold - Cross-Site Request Forgery (Add Admin)

/\ == \ /\ \ /\ \ \ \ inp...

Untrusted applet causes DoS by filling up disk space

Sun Java Runtime Environment JRE 1.5.06 and earlier, JDK 1.5.06 and earlier, and SDK 1.5.06 and earlier allows remote attackers to cause a denial of service disk consumption by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory...

JBoss Application Server Web Console XSS

Multiple cross-site scripting XSS vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML...

JBoss Application Server Web Console XSS

Multiple cross-site scripting XSS vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML...

JBoss Application Server Web Console XSS

Multiple cross-site scripting XSS vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML...

MySQL CREATE TABLE调用绕过访问限制漏洞

CVE ID: CVE-2008-7247 MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 当数据主目录包含有到不同文件系统的符号链接时，MySQL的ql/sqltable.cc允许通过认证的远程攻击者通过以特殊DATA DIRECTORY或INDEX DIRECTORY参数调用CREATE TABLE绕过预期的访问限制，执行各种非授权操作。 MySQL AB MySQL 6.0 MySQL AB MySQL 5.1.x MySQL AB MySQL 5.0.x 厂商补丁： MySQL AB --------...

Oracle ctxsys.drvxtabc.create_tables Evil Cursor Exploit

Exploit for unknown platform in category local exploits ======================================================== Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit ======================================================== Title: Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit CVE-ID:...