202 matches found
Microcart 1.0 Cross Site Scripting
/-----------------------------------------------------------------\ | Microcart 1.0 Admin Cross-Site Scripting Security Vulnerability | -----------------------------------------------------------------/ Summary ======= Microcart 1.0 is subject to a cross-site scripting vulnerability. A generic...
CVE-2010-5087
SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery CSRF protection mechanism and hijack the authentication of administrators via vectors related to "form action requests" using a controller...
CVE-2010-5087
CVE-2010-5087 affects SilverStripe 2.3.x prior to 2.3.10 and 2.4.x prior to 2.4.4. The issue allows remote attackers to bypass CSRF protection and hijack administrator sessions via vectors related to form action requests handled by a controller. Impact is authenticated session hijacking through C...
WordPress Plugin Zingiri Web Shop 2.4.0 - Multiple Cross-Site Scripting Vulnerabilities
WordPress Plugin Zingiri Web Shop 2.4.0 - Multiple Cross-Site Scripting Vulnerabilities Wordpress Zingiri Web Shop Plugin '; Exploit: http://localhost/wordpress/?page=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E 'page' variable isn't properly sanitized before being used. STORED XSS P...
idev-LinkDirectory 1.0 Cross Site Request Forgery
Exploit Title: idev-LinkDirectory 1.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-linkdirectory/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com...
idev-Blog 1.0 Cross Site Request Forgery
Exploit Title: idev-Blog 1.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-blog/admin/ Greetz: Inj3ct0r Exploit DataBase 1337day.com...
Social Bookmark CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: Social Bookmark CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/social-bookmark-script/28963/ Category:: webapps Demo : http://www.e-soft24.com/scripts/social-bookmark/admin Greetz: Inj3ct0r...
javascript: URLs in chrome documents (MFSA 2011-08)
The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 does not properly sanitize HTML in a chrome document, which makes it easier for remot...
XSRF (CSRF) in F3Site
Vulnerability ID: HTB22757 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinf3site.html Product: F3Site Vendor: COMPMaster http://dhost.info/compmaster/ Vulnerable Version: 2011 alfa 1 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: CSRF Cross-Site Reques...
Cpanel 11.X Edit E-mail Cross Site Request Forgery Exploit
Exploit for php platform in category web applications ========================================================== Cpanel 11.X Edit E-mail Cross Site Request Forgery Exploit ========================================================== Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery...
Event Ticket PORTAL <= Admin Password Change (CSRF) Exploit
Exploit for php platform in category web applications =========================================================== Event Ticket PORTAL Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'...
Days of the edge of the school website system v1. 3 upload vulnerability-vulnerability warning-the black bar safety net
Open the admin directory, and found there a upload. asp, this file is submitted and the documents submitted for judgment, which has such a sentence if Uprequest. form"fileErr"0 then select case Uprequest. form"fileErr" But I saw a half day also did not see it this fileErr read what it is, and...
Ding Feng enterprises smart built Station system injection search injection vulnerability analysis and exploit-vulnerability warning-the black bar safety net
Author: L4nk0rMo if you are asked Yesterday the use of this system to get a webshell, but is the use of download the default database, the latter the discoverer of the system interface's also good, by the look of IT security. This article on its search injection vulnerability simple analysis and...
Kusaba X <= 0.9 XSS/CSRF vulnerabilities
========================================== Kusaba X = 0.9 XSS/CSRF vulnerabilities ========================================== Kusaba X suffers XSS and CSRF vulnerabilities that would allow an attacker to take over the web application and possibly the entire server depending on the MySQL...
Video chat rooms password cracking techniques-vulnerability warning-the black bar safety net
Reprint when you didn't see the picture, we only will look at. Because the working relationship, and I qq every Monday to Friday online, but very few people add me as a friend, is probably the old bar, after all, are 2 4, online Dating that period of burning passion had left me far away. But that...
eLitius 1.0 (manage-admin.php) Add Admin/Change Password Exploit
No description provided by source. title Powered by eLitius Version 1.0 Change Password /title form action="http://esyndicat.org/admin/manage-admin.php" method="post" name="adminForm" table class="admintable" tbodytr td table class="adminform" cellpadding="0" cellspacing="0" tbody tr th...
Online Game Script XSRF
|Site Online Game: http://gladiatus.net | | Author: S1B3RK4N | | Email: s1b3rk4natgmaildotcom | | Exploit Code : document.forms0.submit NOT=Arkadaslar bu exploit ile hedef kisinin oyundaki mail adresini degistirebilirsiniz..."form action kismindaki server alanını duzenlemeyi unutmayın..." NOTE=Hi...
XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)
XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads from sourceforge.net...
php session ID leakage
The outputaddrewritevar function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a loca...
php session ID leakage
The outputaddrewritevar function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a loca...