CVE-2009-4555: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in AgoraCart 5.2.005 and 5.2.006 and AgoraCart GOLD 5.5.005 allow remote attackers to hijack the authentication of administrators for requests that 1 modify a .htaccess file via an unspecified request to protected/manager.cgi or 2 change th...

ProShow Gold v4.0.2549 (PSH File) Stack Buffer Overflow

$Id: proshowcellimagebof.rb 7911 2009-12-18 00:19:04Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Esinti Web Design Gold Defter Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== � Note : Baska Biri Bulduysa Affettsin :D...

Esinti Web Design Gold Defter - Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== Note : Baska Biri Bulduysa Affettsin :D...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2009-4349

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2009-4349

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2009-4349

The CVE-2009-4349 entry describes a CSRF vulnerability in Link Up Gold 5.0 affecting the file path administration/administrators.php . The underlying issue allows remote attackers to hijack the authentication of administrators to create new administrative accounts. This is the explicit impact sta...

CVE-2009-4349: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Link Up Gold CSRF - Create Administrator Account

Exploit for unknown platform in category web applications ================================================ Link Up Gold CSRF - Create Administrator Account ================================================ /\ == \ /\ \ /\ \ \ \ input type="h...

CVE-2009-2508: Undefined Security Weakness

The single sign-on implementation in Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previou...

CVE-2009-2509: Improper Input Validation

Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution...

Viscacha 0.8 Gold Cross Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...

Viscacha 0.8 Gold persistant XSS vulnerability

No description provided by source. Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the contex...

Viscacha 0.8 Gold - Persistent Cross-Site Scripting

Viscacha 0.8 Gold - Persistent Cross-Site Scripting Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed...

Viscacha 0.8 Gold - Persistent Cross-Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...

Ipswitch WhatsUp Gold 8.03 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Ipswitch...

CVE-2009-2512: Improper Control of Generation of Code

The Web Services on Devices API WSDAPI in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted 1 message or 2 response, aka "Web Services on Devices API Memory...

Directory traversal

Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magicquotesgpc is enabled, allows remote attackers to read arbitrary files via a .. dot dot in the GLOBALSpage parameter...

CVE-2009-3823

CVE-2009-3823 describes a directory traversal vulnerability in Mobilelib GOLD 3.0, affecting the file myhtml.php. When magic_quotes_gpc is enabled, an attacker can read arbitrary files by supplying a dot-dot (“..”) sequence in the GLOBALS[page] parameter. The root cause is improper validation/san...