(SWAT): XSS flaw in Change Password page

Cross-site scripting XSS vulnerability in the chgpasswd function in web/swat.c in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program aka the user field...

FreeBSD : Samba -- XSS and request forgery vulnerabilities (56f4b3a6-c82c-11e0-a498-00215c6a37bb)

Samba security advisory reports : All current released versions of Samba are vulnerable to a cross-site request forgery in the Samba Web Administration Tool SWAT. By tricking a user who is authenticated with SWAT into clicking a manipulated URL on a different web page, it is possible to manipulat...

Prediction Football 2.51 - Cross-Site Request Forgery

Prediction Football 2.51 - Cross-Site Request Forgery Exploit Title: title Google Dork: if relevant intext:"Prediction football 2.51" Date: 08/08/2011 Author: Smith Falcon Software Link: http://www.predictionfootball.com/download/download.html Version: 2.51 Tested on: Linux First create a usernam...

Prediction Football 2.51 - Cross-Site Request Forgery

Exploit Title: title Google Dork: if relevant intext:"Prediction football 2.51" Date: 08/08/2011 Author: Smith Falcon Software Link: http://www.predictionfootball.com/download/download.html Version: 2.51 Tested on: Linux First create a username and go to Account Profile The POST variable in...

Cross site scripting

Cross-site scripting XSS vulnerability in the chgpasswd function in web/swat.c in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program aka the user field...

CVE-2011-2694

Cross-site scripting XSS vulnerability in the chgpasswd function in web/swat.c in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program aka the user field...

ImmoPHP 1.1.1 Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Madni Designers Web Portal => (change_password)

Exploit for php platform in category web applications Madni Designers Web Portal = changepassword.php Not Security ----------------------------------------------------------- I KnocKout MEMBER FROM Inj3ct0r Team 1337 day. / h4x0reSEC My + Author : KnocKout Contact : email protected E-Mail :...

BigACE 2.7.3 - Cross-Site Request Forgery (Change Admin Password)

!/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7.3 Software detail: BIGACE - Dynamic Web CMS - is a free,...

SAP BusinessObjects Axis2 Default Admin Password

Overview The Axis2 component of SAP BusinessObjects contains a default administrator account and password. Description The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone...

Powered by Emanage (install) Change Password Vulnerability

Exploit for php platform in category web applications ========================================================== Powered by Emanage install Change Password Vulnerability ========================================================== Exploit Title: install Change Password Vulnerability Date: 2010-09-2...

Powered by wpQuiz (install) Change Password Vulnerability

Exploit for php platform in category web applications ========================================================= Powered by wpQuiz install Change Password Vulnerability ========================================================= + Author : wlhaan hacker + Email : email protected + Site : n/a + team...

InterPhoto Gallery - Multiple Vulnerabilities

InterPhoto Gallery - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 6 0day | | | | || / \ || | | | || ||// \/|/ ''' - Title : InterPhoto Gallery Multiple Remote Vulnerabilities - Affected Version : = 2.4.0 - Vendor Site :...

Saurus CMS 4.7.0 Cross Site Request Forgery

Author: Fady Mohammed Osman cute hacker Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz Version: 4.7.0 Tested on: Ubuntu 10.04 CVE : Not available This vulnerability allows a malicious hacker to change password of a user and also it allows changing the website information. PoC ...

XSRF (CSRF) in Mystic

Vulnerability ID: HTB22533 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinmystic.html Product: Mystic Vendor: Hulihan Applications http://hulihanapplications.com/projects/mystic Vulnerable Version: 0.1.4 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Type: CSRF...

Saurus CMS Admin Panel - Multiple Cross-Site Request Forgery Vulnerabilities

Author: Fady Mohammed Osman cute hacker Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz Version: 4.7.0 Tested on: Ubuntu 10.04 CVE : Not available This vulnerability allows a malicious hacker to change password of a user and also it allows changing the website information. PoC ...

TomatoCart 1.0.1 Cross Site Request Forgery

Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download: http://www.tomatocart.com/component/extensionmanage/?task=downloadfiles&file=tomatocart-1.0.1.zip --- -= CSRF PoC 1 - Create Admin User =- TomatoCart 1.0.1 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF...

Campsite CMS 3.4.0 - Multiple Cross-Site Request Forgery Vulnerabilities

Campsite CMS 3.4.0 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Mon 12 Jul 2010 03:40:46 PM EEST Vendor: http://www.sourcefabric.org/en/home/web/6/Campsite.htm?tpl=18 Download: http://sourceforge.net/projects/campsite/files/campsite/3.4.0/campsite-3.4.0.tar.gz/download --- -= CSRF...

Campsite CMS 3.4.0 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ================================================ Campsite CMS 3.4.0 Multiple CSRF Vulnerabilities ================================================ Date: Mon 12 Jul 2010 03:40:46 PM EEST Vendor:...

Campsite CMS 3.4.0 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Mon 12 Jul 2010 03:40:46 PM EEST Vendor: http://www.sourcefabric.org/en/home/web/6/Campsite.htm?tpl=18 Download: http://sourceforge.net/projects/campsite/files/campsite/3.4.0/campsite-3.4.0.tar.gz/download --- -= CSRF PoC 1 - Create Admin User =- Campsite CMS 3.4.0 Multiple CSRF...