CVE-2011-4585

CVE-2011-4585 affects Moodle 1.9.x before 1.9.15. The login/change_password.php form does not use HTTPS even when the httpslogin option is enabled, enabling credential sniffing over the network. Debian/OpenVAS references document this as part of a set of Moodle vulnerabilities; Debian’s advisory ...

CVE-2011-4585

login/changepassword.php in Moodle 1.9.x before 1.9.15 does not use https for the change-password form even if the httpslogin option is enabled, which allows remote attackers to obtain credentials by sniffing the network...

PT-2012-1917 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.14 Description: The issue concerns the change-password form in the login/change password.php file. It does not utilize https for encryption, even when the httpslogin option is enabled. This oversight allows...

cApexWEB 1.1 CSRF Vulnerability (Change Password Admin)

Exploit for php platform in category web applications cApexWEB 1.1 CSRF Vulnerability Change Password Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Dork : inurl:"cApexWEB" === Exploit === cApexWEB 1.1 Change Password...

CVE-2012-0535

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Change Password Page...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Change Password Page...

CVE-2012-0535

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Change Password Page...

online scheduling CSRF (change password)

Exploit for php platform in category web applications Exploit Title: online scheduling CSRF change password Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/online-scheduling-and-appointment-booking/23743/ Category:: webapps Demo :...

psPopper 3.0 CSRF (change password)

Exploit for php platform in category web applications Exploit Title: psPopper 3.0 CSRF change password Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/pspopper-popup-window-controller/6788/ Category:: webapps Demo : http://www.cgiscript.net/demo/psPopper/psPopper.php...

Sagem F@ST 2604 ADSL Router - Cross-Site Request Forgery

Sagem F@ST 2604 ADSL Router - Cross-Site Request Forgery ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...

Cisco Linksys WAG54GS - Cross-Site Request Forgery (Change Admin Password)

Cisco Linksys WAG54GS - Cross-Site Request Forgery Change Admin Password +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Cisco Linksys WAG54GS ADSL Router change admin password Date : 20-02-2012...

D-Link DSL-2640B ADSL Router - Cross-Site Request Forgery

D-Link DSL-2640B ADSL Router - Cross-Site Request Forgery +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti...

D-Link DSL-2640B ADSL Router - Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://www.d-link.com...

Pirelli Discus DSL-DRGA112-07 Remote Change Password

Exploit Title: Pirelli Discus DSL-DRGA112-07 Remote Change Password Date: 17/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Hardware: Pirelli Discus DSL-DRGA112-07 DSL-DRGA112-07 Tested on: Linux Comment Greetz: Hernan Jais,...

Pirelli Discus DSL-DRGA112-07 Remote Change Password

Exploit for hardware platform in category web applications Exploit Title: Pirelli Discus DSL-DRGA112-07 Remote Change Password Date: 17/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Hardware: Pirelli Discus DSL-DRGA112-07...

FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities

FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...

(SWAT): XSS flaw in Change Password page

Cross-site scripting XSS vulnerability in the chgpasswd function in web/swat.c in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program aka the user field...

(SWAT): XSS flaw in Change Password page

Cross-site scripting XSS vulnerability in the chgpasswd function in web/swat.c in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program aka the user field...

(SWAT): XSS flaw in Change Password page

Cross-site scripting XSS vulnerability in the chgpasswd function in web/swat.c in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program aka the user field...

FreeBSD : Samba -- XSS and request forgery vulnerabilities (56f4b3a6-c82c-11e0-a498-00215c6a37bb)

Samba security advisory reports : All current released versions of Samba are vulnerable to a cross-site request forgery in the Samba Web Administration Tool SWAT. By tricking a user who is authenticated with SWAT into clicking a manipulated URL on a different web page, it is possible to manipulat...