PT-2009-6003 · Citrix · Citrix Xencenterweb

Name of the Vulnerable Software and Affected Versions: Citrix XenCenterWeb affected versions not specified Description: The issue concerns multiple cross-site request forgery CSRF vulnerabilities in sample code within the XenServer Resource Kit in Citrix XenCenterWeb. These vulnerabilities allow...

Infoblox IPAM Appliance Default Credentials

The remote host appears to be running Infoblox IPAM appliance. Nessus was able to log into the remote web console using default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid42212; scriptversion"1.12...

Server side request forgery (ssrf)

NetRisk 1.9.7 does not properly restrict access to admin/changesubmit.php, which allows remote attackers to change the password of arbitrary users via a direct request...

WebLeague 2.2.0 Password Changer

TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz...

CVE-2009-2482

The pamunix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group...

webLeague 2.2.0 (install.php) Remote Change Password Exploit

No description provided by source. TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz sebug.net...

webLeague 2.2.0 - install.php Remote Change Password

webLeague 2.2.0 - install.php Remote Change Password TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz milw0rm.com 2009-07-16...

webLeague 2.2.0 (install.php) Remote Change Password Exploit

Exploit for unknown platform in category web applications ============================================================ webLeague 2.2.0 install.php Remote Change Password Exploit ============================================================ WebLeague 2.2.0 install.phpRemote Change Password By:...

webLeague 2.2.0 - 'install.php' Remote Change Password

TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz milw0rm.com 2009-07-16...

elgg - Cross-Site Scripting Cross-Site Request Forgery Change Password

elgg - Cross-Site Scripting Cross-Site Request Forgery Change Password + CMS Elgg uploading to a host.Save as cookie.php +Exploit: ------- 1 Register in The SIte 2 add to the Template The victim would be anyone who comes to your blog...

Elgg (XSS/CSRF/Change Password) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Elgg XSS/CSRF/Change Password Multiple Remote Vulnerabilities =============================================================== + CMS Elgg uploading to a host.Save as cookie.php...

CMS Buzz (XSS/PC/HI) Multiple Remote Vulnerabilities

No description provided by source. + CMS Buzz xss/Change PasswordMultiple Remote Vulnerabilities + Discovered By ThE g0bL!N + Vendor:cmsbuzz.com + Note : If you are The S3r!0uS I say To Fuck you Because You are Hacked Site Of My Best Friends dz-boys.com + Demo:http://demo.cmsbuzz.com/ + Greeting ...

Evernew Free Joke Script 1.2 Password Changer

Remote Change Password = Bug detail bug in change.php file in line 10 : $result=mysqlquery"update admin set password='$pass'"; ----------------------- = Fix $result=mysqlescapestring"update admin set password='$pass'"; change mysqlquery to mysqlescapestring = Greetz : ExH , ProViDoR , Error code ...

Evernew Free Joke Script 1.2 Remote Change Password Exploit

No description provided by source. !-- Discovered & Exploited by : Hakxer Evernew Free Joke Script 1.2 = Remote Change Password = Bug detail bug in change.php file in line 10 : $result=mysqlquery"update admin set password='$pass'"; ----------------------- = Fix $result=mysqlescapestring"update...

Evernew Free Joke Script 1.2 - Remote Change Password

Evernew Free Joke Script 1.2 - Remote Change Password Remote Change Password = Bug detail bug in change.php file in line 10 : $result=mysqlquery"update admin set password='$pass'"; ----------------------- = Fix $result=mysqlescapestring"update admin set password='$pass'"; change mysqlquery to...

Evernew Free Joke Script 1.2 Remote Change Password Exploit

Exploit for unknown platform in category web applications =========================================================== Evernew Free Joke Script 1.2 Remote Change Password Exploit =========================================================== Remote Change Password = Bug detail bug in change.php file ...

Evernew Free Joke Script 1.2 - Remote Change Password

Remote Change Password = Bug detail bug in change.php file in line 10 : $result=mysqlquery"update admin set password='$pass'"; ----------------------- = Fix $result=mysqlescapestring"update admin set password='$pass'"; change mysqlquery to mysqlescapestring = Greetz : ExH , ProViDoR , Error code ...

Host Directory PRO 2.1.0 Remote Change Admin Password Exploit

No description provided by source. titlechange password Host Directory PRO 2.1.0 /title body bgcolor="000000" trtd class="setting" form name="config" action="http://demo-host-directory-pro.phphostdirectoryscript.com/admin/config" method="post" h4Configuration/h4 table tr tdfont color="FFFFFF"Web...

Web Directory PRO (admins.php) Change Admin Password Exploit

Exploit for unknown platform in category web applications ============================================================ Web Directory PRO admins.php Change Admin Password Exploit ============================================================ change password Web Directory PRO MODIFY Login Password...

Web Directory PRO - 'Admins.php' Change Admin Password

change password Web Directory PRO MODIFY Login Password TypeSubadminAdmin Categories ArtBusinessComputersGamesHealth & FitnessNewsSportsRecreationInternetTeen & KidsReferenceEducationRegionalSocietyScienceHome & FamilyWorldShoppingWeb HostingDedicated ServersISPHardwareSoftwareSecurity...