240 matches found
ZShare Embedder CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: ZShare Embedder CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/zshare-embeddergrabber-scriptacula/27263/ Category:: webapps Demo : http://demo.phpmymovie.com/siteadmin/ Greetz: Inj3ct0r Exploit...
Phonora Photo Gallery CSRF
Exploit for php platform in category web applications Exploit Title: Phonora Photo Gallery CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/phonora-photo-gallery/27420/ Category:: webapps Demo : http://www.parallelex.com/phonora/demo/photogallery/ Greetz: Inj3ct0r...
Izlebizi Video Script Add Admin Account Exploit
Exploit for php platform in category web applications Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm ZoRLu member from Inj3ct0r Team 1 1...
BoutikOne Multiples SQL Injection Vulnerability
BoutikOne - Multiples SQL Injection Vulnerability RELEASE DATE : 13.03.2011 by Alz cdxdotsecurityatgmaildotcom - Google Dork: "Powered by BoutikOne" - categorie.php Var path : http://target/categories.php?path=sqli - list.php Var path : http://target/list.php?path=sqli - description.php Var id :...
BoutikOne Multiple SQL Injections
BoutikOne - Multiples SQL Injection Vulnerability RELEASE DATE : 13.03.2011 by Alz categorie.php Var : http://target/categories.php?path=sqli - list.php Var : http://target/list.php?path=sqli - description.php Var : http://target/description.php?id=sqli - description.php Var :...
cPanel 11.x - Cross-Site Request Forgery (Edit E-mail)
cPanel 11.x - Cross-Site Request Forgery Edit E-mail Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit Date: 22 - 10 - 2010 Author: Mon7rF Mail : [email protected] Tested on: Windows 7 --------------------------------------------------------------------------------------...
CVE-2010-3694
Cross-site request forgery CSRF vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form...
Wind news site management system any changes to password vulnerabilities-vulnerability warning-the black bar safety net
FoosunCMS is a powerful feature of based on ASP+ACCESS/MSSQL architecture of content management software. Vulnerability analysis: In the file\User\ GetPassword. asp: ElseIf Request. Form"Action" = "step3" then //first 2 Line 8 Call step3 ...... Sub step3 //the 1 9 8 row Dim ppassnew,pconfimpassne...
Prediction League 0.3.8 - Cross-Site Request Forgery (Add Admin)
Prediction League 0.3.8 - Cross-Site Request Forgery Add Admin ======================================================================================== | Title : Prediction League 0.3.8 CSRF Create Admin User Exploit | Author : indoushka | Home : www.iqs3cur1ty.com/vb | Tested on: Lunix Français...
Messages Library 2.0 Arbitrary Administrator Account Vulnerability
No description provided by source. head titleThE g0bL!N Messages Library 2.0 Remote Add Admintsrator Account /title base target="left" link rel="stylesheet" href="style.css" /head form method="POST" action="http://path/sms/admin/mod.php?Action=Add" table border="0" cellpadding="0" cellspacing="0"...
Getacoder clone (sb_protype) Remote SQL Injection Vulnerability
No description provided by source. || | | Getacoder Clone Script sbprotype Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...
Repair Online v1.2 (sentout) Create Admin Vulnerability
/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: Repair Online v1.2 sentout Create Admin...
CGI RESCUE WebFORM allows unauthorized email transmission
Overview WebFORM from CGI RESCUE is software which delivers the HTML form inputs via email. WebFORM fails to check the mail headers properly, allowing a remote attacker to send email to arbitrary addresses. According to the vendor's information, FORM2MAIL also contains a similar vulnerability, an...
CGI RESCUE WebFORM vulnerable to cross-site scripting
Overview WebFORM, released from CGI RESCUE, is a CGI script written in perl that allows a user to send email messages via a HTML form. WebFORM contains a cross-site scripting vulnerability. Impact An abitrary script may be executed on the user's web browser. Solution None...
CVE-2007-6125
SQL injection vulnerability in searchform.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbitrary SQL commands via the sbprotype parameter...
MiniNuke 1.8.2 - Multiple SQL Injections
Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MiniNuke www.miniex.net Version: 1.8.2 and prior versions must be affected. About:Via this method remote attacker can inject SQL query to the news.asp --- How&Example: GET -...
cubecart-3.0.3.txt
CubeCart 3.0.3 multiple variable Cross site scripting Vendor url: www.cubecart.com bug report:http://bugs.cubecart.com/?do=details&id=363 Advisore:http://lostmon.blogspot.com/2005/09/ cubecart-303-multiple-variable-cross.html vendor confirmed: yes exploit avalable: yes Fix available: yes CubeCar...
CVE-2001-1242
Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. dot dot in an HTML form...
Leif M. Wright simplestmail.cgi 1.0 - Remote Command Execution
Leif M. Wright simplestmail.cgi 1.0 - Remote Command Execution source: https://www.securityfocus.com/bid/2102/info A vulnerabiliy exists in Leif M. Wright's simplestmail.cgi, a script designed to coordinate email responses from web forms. An insecurely-structured call to the open function leads t...
