DEBIAN-CVE-2012-1053

The changeuser method in the SUIDManager lib/puppet/util/suidmanager.rb in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors...

Campsite CMS 3.4.0 Cross Site Request Forgery

Date: Mon 12 Jul 2010 03:40:46 PM EEST Vendor: http://www.sourcefabric.org/en/home/web/6/Campsite.htm?tpl=18 Download: http://sourceforge.net/projects/campsite/files/campsite/3.4.0/campsite-3.4.0.tar.gz/download --- -= CSRF PoC 1 - Create Admin User =- Campsite CMS 3.4.0 Multiple CSRF...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Limny 2.0 allow remote attackers to 1 hijack the authentication of users or administrators for requests that change the email address or password via the user action to index.php, and 2 hijack the authentication of the administrator for...

Recipe Script v5.0 Shell Upload/XSRF/XSS Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= Recipe Script v5.0 Shell Upload/XSRF/XSS Multiple Vulnerabilities =================================================================...

FubarForum 1.6 Admin Bypass Change User Password Vulnerability

No description provided by source. ..:: R31P0lathotmail.com ::.. Tanx from : str0ke Script : FubarForum Version : 1.6 Dork : "Powered by FubarForum v1.6" /forum/index.php?page=profile&userid=1 Greetz to: Corenamed, Unsecured, Esedark, pax0r, zrallter, th0r... and TerminalHacker...

noname script 1.1 - Multiple Vulnerabilities

NoName Script 1.1 BETA Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Local File Inclusion http://localhost/index.php?action=../../../autoexec.bat%00&kategorie=Tutorial This will open...

[DSECRG-08-030] Claroline 1.8.9 Multiple Security Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-08-030 Application: Claroline eLearning and eWorking platform Versions Affected: 1.8.9 Vendor URL: http://www.claroline.net/ Bug: Multiple XSS, Phishing Through URL Redirection, Change User Password XSRF Vulnerability Exploits: YES Reported:...

Blogator-script 0.95 - Change User Password

Blogator-script 0.95 - Change User Password ...:::::Blogator-script 0.95 Change User Password Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar...

Blogator-script 0.95 - Change User Password

...:::::Blogator-script 0.95 Change User Password Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best frie...

Blogator-script 0.95 Change User Password Vulnerability

Exploit for unknown platform in category web applications ======================================================= Blogator-script 0.95 Change User Password Vulnerability ======================================================= ...:::::Blogator-script 0.95 Change User Password Vulnerbility ::::...

Blogator-script 0.95 Change User Password Vulnerbility

...:::::Blogator-script 0.95 Change User Password Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best frie...

DSECRG-08-013.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-013 Application: MODx CMS Versions Affected: 0.9.6.1, 0.9.6.1p1 Vendor URL: http://modxcms.com/ Bugs: XSS, SiXSS, stored XSS, Change User Password XSRF Vulnerability. Exploits: YES Reported: 11.01.2008 Vendor response: 11.01.2008 Updated...

[DSECRG-08-013] Modx 0.9.6.1, 0.9.6.1p1 Multiple Security Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-08-013 Application: MODx CMS Versions Affected: 0.9.6.1, 0.9.6.1p1 Vendor URL: http://modxcms.com/ Bugs: XSS, SiXSS, stored XSS, Change User Password XSRF Vulnerability. Exploits: YES Reported: 11.01.2008 Vendor response: 11.01.2008 Updated...

Webspell 4.01.02 2 Vulnerabilites

Webspell 4.01.02 2 Vulnerabilites Founded by NBBN Vendor: http://cms.webspell.org 1 Cross-Site Scripting Vulnerability 2 Change User Permission XSRF Vulnerability 1 http://site.tld/path/index.php?site=whoisonline&sort="xss code 2 This creates a superadmin account, when an admin click a link, to a...

Seditio 1.10 - avatarselect id SQL Injection

Seditio http://www.victim.com/users.php?m=profile&a=avatarselect&x=XVALUE&id=default.gifSQL Inject GET - http://www.victim.com/users.php?m=profile&a=avatarselect&x=011A99&id=default.gif%2500%2527,userpassword=%2527e10adc3949ba59abbe56e057f20f883e%2527//where//userid=1/ with this example remote...

iPrimal Forums (admin/index.php) Change User Password Exploit

No description provided by source. !perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGV4 else &start ; sub start $host=$ARGV0; $path=$ARGV1; $user=$ARGV2; $passwd=$ARGV3;...

iPrimal Forums (admin/index.php) Change User Password Exploit

Exploit for unknown platform in category web applications ============================================================= iPrimal Forums admin/index.php Change User Password Exploit ============================================================= !perl Bl0od3r Germany shoutzz to all members of dC3 cre...

iPrimal Forums - '/admin/index.php' Change User Password

!perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort="80" or die "Error"; print $sock "POST ".$path."admin/index.php?p=members&edit=".$user."...

iPrimal Forums - adminindex.php Change User Password

iPrimal Forums - adminindex.php Change User Password !perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort="80" or die "Error"; print $sock "POST...

CVE-2004-2148

Technical details (affected product/component, vulnerability type, impact, exploit vectors) are not provided in the supplied documents. Monitor for updates from NVD/CVE records and related advisories.