841 matches found
CVE-2010-2594
Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....
MusicBox <= v3.3 (install.php) Change Password Vulnerability
Exploit for php platform in category web applications ============================================================ MusicBox = v3.3 install.php Change Password Vulnerability ============================================================ Author : Mr.ThieF Software Link : www.musicboxv2.com Version :...
El-Thna2ya Links Manager SQL Injection / Cross Site Request Forgery
Exploit Title : El-Thna2ya Links Manager Multiple Vulnerabilities Date : 20 - 6 - 2010 Author : S.W.T Software Link : http://www.mediafire.com/?mjjfjmyzmej Version : All Versions Tested on : Linux Home : WwW.SeC-WaR.CoM -== SQL Injection Vulenrability ==- http://www.site.com/path/go.php?id=SQL1...
Simple Machines Forum 1.1.11 Change Administrator Password
============================================================================ | SMF 1.1.11 change Password Admin | My Home Page : WwW.HackTeacH.CoM | Founded By : ShaDow-D3v1L ============================================================================...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password...
CVE-2010-2025
Multiple cross-site request forgery CSRF vulnerabilities in the web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 allow remote attackers to hijack the authentication of administrators for requests that 1 reset the modem, 2 erase the...
60 cycleCMS 2.5.2 - Cross-Site Request Forgery (Change Username and Password)
======================================================================================== | Title : 60 cycleCMS V 2.5.2 CSRF Change Username & Password Exploit | Author : EL-KAHINA | Home : www.iqs3cur1ty.com/vb | Web Site : http://php.opensourcecms.com/scripts/details.php?scriptid=337 | Tested on...
60 cycleCMS 2.5.2 - Cross-Site Request Forgery (Change Username and Password)
60 cycleCMS 2.5.2 - Cross-Site Request Forgery Change Username and Password ======================================================================================== | Title : 60 cycleCMS V 2.5.2 CSRF Change Username & Password Exploit | Author : EL-KAHINA | Home : www.iqs3cur1ty.com/vb | Web Site...
Adult Video Site Script Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================ Adult Video Site Script Multiple Vulnerabilities ================================================ ======================================================================================== |...
Adult Video Site Script - Multiple Vulnerabilities
Adult Video Site Script - Multiple Vulnerabilities ======================================================================================== | Title : ADULT VIDEO SITE SCRIPT Remote Upload Exploit | Author : indoushka | Home : www.dz-blackhat.com | Tested on: Lunix Français v.9.4 Ubuntu | Bug :...
CSICE Cross Site Request Forgery / Cross Site Scripting
http://www.csice.org/ Suffers from XSS and CSRF cross site scripting and cross site request forgery attacks. The vulnerability lies in the Post comment filelds in the following page move to this page 'only for authenticated user' http://www.csice.org/student/subjects.html and choose a subject and...
CSICE XSS and CSRF Vulnerability
Exploit for unknown platform in category web applications ================================ CSICE XSS and CSRF Vulnerability ================================ http://www.csice.org/ Suffers from XSS and CSRF cross site scripting and cross site request forgery attacks. The vulnerability lies in the...
Code injection
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...
Tinypug 0.9.5 - Cross-Site Request Forgery (Password Change)
Tinypug 0.9.5 - Cross-Site Request Forgery Password Change www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation...
Croogo 1.2.1 Cross Site Request Forgery
----------------------------------------------------------------------------------------------- Title: Croogo 1.2.1 Multiple CSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmaildotcom Date: 07. February 2010...
Croogo 1.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities
Croogo 1.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities ----------------------------------------------------------------------------------------------- Title: Croogo 1.2.1 Multiple CSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmaildotcom Date: 07. February 2010...
Croogo v1.2.1 Multiple CSRF Vulnerabilities
Exploit for unknown platform in category web applications =========================================== Croogo v1.2.1 Multiple CSRF Vulnerabilities =========================================== ----------------------------------------------------------------------------------------------- Application...
Al3jeb Remote Change Password
Exploit Title :al3jeb script Remote Change Password Exploit Author: alnjm33 Software Link: http://www.traidnt.net/vb/attachment.php?attachmentid=354606&d=1237376300 Version: 1.3 Tested on:1.3 MY home : Sec-war.com :::::::::::::::exploit::::::::::::::::::::: al3jeb script Remote Change Password...