DirectAdmin 1.34.4 - Multiple Cross-Site Request Forgerys

DirectAdmin 1.34.4 - Multiple Cross-Site Request Forgerys ============================================================================= Title : Multi CSRF vulnerability in DirectAdmin 1.34.4 Date : 20-3-2010 Version : 1.34.4 Author : K053 K053.Dev0te3 AT gmail Tested on : Ubuntu Vendor :...

DirectAdmin 1.34.4 - Multiple Cross-Site Request Forgerys

============================================================================= Title : Multi CSRF vulnerability in DirectAdmin 1.34.4 Date : 20-3-2010 Version : 1.34.4 Author : K053 K053.Dev0te3 AT gmail Tested on : Ubuntu Vendor : http://www.directadmin.com/ Download :...

NinkoBB 1.3RC4 Change Admin and Add New Admin CSRF Vulnerability

Exploit for unknown platform in category web applications ================================================================ NinkoBB 1.3RC4 Change Admin and Add New Admin CSRF Vulnerability ================================================================ change admin user,passwd & add new admin use...

ActiveCampaign 1-2-All Broadcast Email 4.0 7 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================================================== ActiveCampaign 1-2-All Broadcast Email Admin Control Panel Username SQL Injection Vulnerability...

NinkoBB 1.3RC4 Cross Site Request Forgery

change admin user,passwd & add new admin user exploit Author: ItSecTeam download from:http://ninkobb.com/releases/?NinkoBB-1.3RC4.zip script:NinkoBB 1.3RC4 update:2010 ----------------------------------------- xpl: coded by ahmadbady Admin Control Panel - Editing User Username Settings banned...

phpBazar 'classified.php' SQL Injection Vulnerability

The host is running phpBazar and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbphpbazarsqlinjvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ phpBazar 'classified.php' SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...

MobPartner Chat Multiple Sql Injection Vulnerabilities

No description provided by source. MobPartner Chat Multiple Sql Injection Vulnerability ============================================================================ .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : MobPartner .:...

MobPartner Chat SQL Injection

MobPartner Chat Multiple Sql Injection Vulnerability ============================================================================ .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : MobPartner .:. Download Script:...

MobPartner Chat Multiple Sql Injection Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== MobPartner Chat Multiple Sql Injection Vulnerabilities ====================================================== .:. Script : MobPartner .:. Download Script:...

MobPartner Chat - Multiple SQL Injections

MobPartner Chat - Multiple SQL Injections MobPartner Chat Multiple Sql Injection Vulnerability ============================================================================ .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : MobPartner...

MobPartner Chat - Multiple SQL Injections

MobPartner Chat Multiple Sql Injection Vulnerability ============================================================================ .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : MobPartner .:. Download Script:...

crownweb (page.cfm) Sql Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== crownweb page.cfm Sql Injection Vulnerability =============================================== .:. Script : crownweb .:. Language : Cfm .:. Script Download: http://www.crownweb.net/ .:. Bug Ty...

crownweb - page.cfm SQL Injection

crownweb - page.cfm SQL Injection crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download:...

Crownweb SQL Injection

crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download:...

crownweb - 'page.cfm' SQL Injection

crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download: http://www.crownweb.net/ .:. Bug Type...

Comtrend ADSL Router Cross Site Scripting

Exploit Title: XSS in cpanel of Comtrend ADSL Router Date: 23-1-2010 Author: Yoyahack Software: Comtrend Version: CT-507IT / XSS in the control panel Comtrend ADSL Router / / Autor: Yoyahack Site: undersecurity.net / Exploit:...

Command line under a new account method-vulnerability warning-the black bar safety net

Today research about the user control panel file nusrmgr. cpl, the discovery call is to the Shell. Users to add users, it also simultaneously calls the wscript. shell, Shell. Application, Shell. LocalMachine these three components. But added to the user while this one Shell. Users is sufficient. ...

SA-CONTRIB-2010-007 - Control Panel - Cross Site Scripting

The Control Panel module enables users to add a new graphical control panel page. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. Only users with the 'administer blocks' permission are able to exploit this...

RoseOnlineCMS 3 B1 - Remote Authentication Bypass

RoseOnlineCMS 3 B1 - Remote Authentication Bypass '/ -.- --------------------oOO------OOo------------------- | RoseOnlineCMS ! Download: http://sourceforge.net/projects/rosecms/files/ ! Date: 16.01.2010 ! Remote: yes ! Code : " method="post" Username: Password: ?php ifisset$POST'submit' //...

On plesk virtual host to mention the right-vulnerability warning-the black bar safety net

This virtual machine in a foreign country relatively popular. Safety performance is also very high, where the next record to mention the right methods. 1. mysql adminthe original rootand the default passwordsetupdidn't change,by mysql to provide the right 2. Parallels Plesk Control Panel,in 8 8 8...