Radiant CMS v 1.1.4 - CSRF Vulnerability

Exploit for php platform in category web applications Title : Radiant CMS v 1.1.4 - CSRF Exploit Author : ZwX Date : 16/07/2015 Download : http://radiantcms.org/download/ Vendor : http://radiantcms.org/ Level Security : Medium Tested on : Windows 7 +----------------------+ Description & Detail...

CVE-2015-6468

CVE-2015-6468 is a CSRF vulnerability in Resource Data Management’s Web-based Data Manager, affected versions prior to 2.2. The issue enables an attacker to hijack an authenticated user’s session and perform unintended actions on trusted pages via CSRF vectors (details not specified in the provid...

ZeusCart 4.0 - CSRF 漏洞

No description provided by source. document.myform.submit;...

ZeusCart 4.0 - SQL Injection / CSRF Vulnerability

Exploit for php platform in category web applications ZeusCart 4.0: SQL Injection Security Advisory – Curesec Research Team 1. Introduction Affected Product: ZeusCart 4.0 Fixed in: not fixed Fixed Version Link: n/a Vendor Contact: email protected Vulnerability Type: SQL Injection Remote...

CVE-2015-6827

Cross-site request forgery CSRF vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentication of users for requests that change a password via a request to signup.php...

CVE-2015-6827

CVE-2015-6827 describes a Cross-Site Request Forgery (CSRF) in Auto-Exchanger 5.1.0 that allows an attacker to hijack a user’s session and cause a password change by sending a request to signup.php. The vulnerability affects Auto-Exchanger 5.1.0 and is publicly discussed in multiple sources (e.g....

Auto-Exchanger 5.1.0 - CSRF Vulnerability

Exploit for php platform in category web applications INPUT type='h...

Watu PRO 4.8.8.4 - CSRF

Assuming there is a quiz with ID 1, the following link will delete it when visited by a logged-in admin:http://localhost/wp-admin/admin.php?page=watuproexams&action=delete&quiz=1...

Cerb 7.0.3 Cross Site Request Forgery Vulnerability

Cerb version 7.0.3 suffers from a cross site request forgery vulnerability. Product: Cerb Vendor: Webgroup Media LLC Vulnerable Versions: 7.0.3 and probably prior Tested Version: 7.0.3 Advisory Publication: August 12, 2015 without technical details Vendor Notification: August 12, 2015 Vendor Patc...

Watu PRO Play 1.9.2.1 Cross Site Scripting

Details ================ Software: Watu PRO Play Version: 1.9.2.1 Homepage: http://calendarscripts.info/watupro/modules.htmlplay Advisory report: https://security.dxw.com/advisories/stored-xss-in-watu-pro-play-allows-unauthenticated-attacker-to-do-almost-anything-an-admin-can/ CVE: Awaiting...

Watu PRO 4.8.8.4 Cross Site Scripting

Details ================ Software: Watu PRO Version: 4.8.8.4 Homepage: http://calendarscripts.info/watupro/ Advisory report: https://security.dxw.com/advisories/stored-xss-in-watu-pro-allows-unauthenticated-attackers-to-do-almost-anything-an-admin-can/ CVE: Awaiting assignment CVSS: 5.8 Medium;...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/adminusers.php...

Pligg CMS 2.0.2 CSRF漏洞

创建一个新文件，然后写入一个web后门，拿到webshell. 我们可以用另外一个方法也是可以用来getshell，先利用第一个漏洞编辑站点目录index.php，接着我们编辑保存下。 然后运保存成功后，查看index.php，然后就生成了test.php文件...

PT-2015-7043 · Siemens · Simatic S7-1200 Cpu

Name of the Vulnerable Software and Affected Versions: Siemens SIMATIC S7-1200 CPU devices with firmware prior to 4.1.3 Description: A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations: For firmware...

CVE-2015-5698

Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Jenkins 1.626 Code Execution / Cross Site Request Forgery

Title: Jenkins 1.626 - Cross Site Request Forgery / Code Execution Date: 27.08.15 Affected versions: = 1.626 current Vendor: jenkins-ci.org Contact: smash at devilteam.pl Cross site request forgery vulnerability in Jenkins 1.626 allows remote attackers to hjiack the authentication of users for mo...

ESA-2015-130: EMC Documentum WebTop and WebTop Clients Cross-Site Request Forgery Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-130: EMC Documentum WebTop and WebTop Clients Cross-Site Request Forgery Vulnerability EMC Identifier: ESA-2015-130 CVE Identifier: CVE-2015-4530 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected products: • EMC...

PHPfileNavigator v2.3.3 CSRF Add Arbitrary Users

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPFILENAVIGATOR0812a.txt Vendor: ================================ pfn.sourceforge.net Product: =================================== PHPfileNavigator v2.3.3 pfn Is...

CVE-2015-2983

CVE-2015-2983 concerns a Cross-Site Request Forgery (CSRF) in the admin.php script of PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone (versions 1.0.1 Free and earlier). The vulnerability allows an attacker to hijack the authentication of arbitrary users when they are logged in, by...

Vifi Radio 1 Shell Upload / CSRF

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Vifi Radio v1 - Arbitrary File Upload Vulnerability with CSRF My + Discovered by: KnocKout Contact : [email protected] HomePage :...