513 matches found
SourceBans 1.4.2 - Arbitrary Change Admin Email
Sourcebans PHP sb-callback.php Author: Mr. Anonymous ------ Vendor:http://www.sourcebans.com Affected Versions: Execute"UPDATE ".DBPREFIX."admins SET email = '".$email."' WHERE aid = '".$aid."'"; $objResponse-addScript"ShowBox'E-mail address changed', 'Your E-mail address has been changed...
SourceBans 1.4.2 - Arbitrary Change Admin Email
SourceBans 1.4.2 - Arbitrary Change Admin Email Sourcebans PHP sb-callback.php Author: Mr. Anonymous ------ Vendor:http://www.sourcebans.com Affected Versions: Execute"UPDATE ".DBPREFIX."admins SET email = '".$email."' WHERE aid = '".$aid."'"; $objResponse-addScript"ShowBox'E-mail address changed...
JobHut 1.2 Password Change
-------------------------------------------------- JobHut = 1.2 manageUsers Remote password change Vulnerability ---------------------------------------------------- founder : ThE g0bL!N Script Download: http://jobhut.spranger.us/ version:= 1.2 thx: to K-159 for 1 exploit...
phpFoX 1.6.21 Cross Site Request Forgery
phpFoX Version 1.6.21 cross site request forgery exploit dork:Powered by phpFoX found by d14l greetz to:soul,marcoj,al0xyz,stefo,aljosha,sp1r1t,invisible greetz to all good people from my country croatia phpFoX Version 1.6.21 suffers from cross site request forgery which allows attacker to change...
PHPmotion 2.1 Cross Site Request Forgery
PHPmotion Source of pwned.html file: Once your victim has visited your evil page, You may now be able to log...
PHPmotion <= 2.1 CSRF Vulnerability
No description provided by source. PHPmotion = 2.1 CSRF vulnerability Author: Ausome1 Email: [email protected] Website: http://www.enigmagroup.org Description: Change a member's password and/or email...
PHPmotion 2.1 - Cross-Site Request Forgery
PHPmotion Source of pwned.html file: Once your victim has visited your evil page, You may now be able to log into their PHPMotion account, using password "password123" an...
DeluxeBB <= 1.09 Remote Admin Email Change Exploit
Exploit for unknown platform in category web applications ================================================== DeluxeBB unbufferedquery"UPDATE ".$prefix."users SET email='$xemail', msn='$xmsn', icq='$xicq', ... WHERE username='$membercookie'"; So, editing cookie "membercookie" you can change remote...
DeluxeBB 1.09 - Remote Admin Email Change
!/usr/bin/python -- coding: iso-8859-15 -- ''' | ' \ / \ / / \ ' \ | | | | / unbufferedquery"UPDATE ".$prefix."users SET email='$xemail', msn='$xmsn', icq='$xicq', ... WHERE username='$membercookie'"; So, editing cookie "membercookie" you can change remote user's email. Enjoy ;...
DeluxeBB <= 1.09 Remote Admin Email Change Exploit
No description provided by source. !/usr/bin/python -- coding: iso-8859-15 -- ''' | ' \ / \ / / \ ' \ | | | | / / | | | || ||//\|| || ------------------------------------------------------------------------------------------------ § DeluxeBB 0day Remote Change Admin's credentials §...
CVE-2005-4688
PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (3rd)
Exploit for unknown platform in category web applications ==================================================================== Hosting Controller Username : emailaddress : firstname : 0day.today 2018-03-09...
CVE-2020-15245: Ability to switch customer email address on account detail page and stay verified
Impact The user may register in a shop by email [email protected], verify it, change it to the mail [email protected] and stay verified and enabled. This may lead to having accounts addressed to totally different emails, that were verified. Note, that this way one is not able to take over any...