Wolf CMS 0.6.0a Cross Site Request Forgery

Exploit Title: Wolf CMS Change Admin Password CSRF Date: 2010-04-03 Author: Stefan M. Software Link: http://www.wolfcms.org/ Version: 0.6.0a Email: [email protected] GreeTz to: d14la.k.a Teo & baltazar --- START OF HTML CODE --- Bengali Chinese Croat...

Adult Video Site Script - Multiple Vulnerabilities

======================================================================================== | Title : ADULT VIDEO SITE SCRIPT Remote Upload Exploit | Author : indoushka | Home : www.dz-blackhat.com | Tested on: Lunix Français v.9.4 Ubuntu | Bug : ADULT VIDEO SITE SCRIPT Remote Upload Exploit...

Get User without Password and User which have an PW and days since last Password change

This plugin uses SSH to get User without Password and User which have an PW and days since last Password change. If the testuser have no access to /etc/shadow an KB entry will set. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

Get User without Password and User which have an PW and days since last Pasword change

This plugin uses ssh to get User without Password and User which have an PW and days since last Pasword change. If the testuser have no access to /etc/shadow an KB entry will set. OpenVAS Vulnerability Test $Id: GSHBSSHpasswords.nasl 7279 2017-09-26 13:40:36Z cfischer $ Get User without Password...

Ananta Gazelle SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================== Ananta Gazelle SQL Injection Vulnerability ========================================== Title: Ananta Gazelle SQL Injection Vulnerability Vendor: http://www.anantasoft.com/ Vulnerable Version: 1.0...

Ananta Gazelle 1.0 SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: Ananta Gazelle SQL Injection Vulnerability Vendor: http://www.anantasoft.com/ Vulnerable Version: 1.0 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: Ananta Gazelle is a rich JavaScript enabled CMS with...

CVE-2009-4675

admin/admininfo/index.php in the Mole Group Gastro Portal Restaurant Directory Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission...

CVE-2009-4674

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

CVE-2009-4674

The CVE-2009-4674 entry affects Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script. The flaw in admin/admin.php allows remote attackers to change an arbitrary password by modifying a user_id field, indicating an authentication/configuration weakness in the user management func...

Tinypug 0.9.5 - Cross-Site Request Forgery (Password Change)

www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Tinypug is a...

Tinypug CSRF Password Change

Exploit for unknown platform in category web applications ============================ Tinypug CSRF Password Change ============================ ============================================================================== » Note : Default Username Of Admin : Administrator...

Tinypug 0.9.5 - Cross-Site Request Forgery (Password Change)

Tinypug 0.9.5 - Cross-Site Request Forgery Password Change www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation...

Croogo 1.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities

----------------------------------------------------------------------------------------------- Title: Croogo 1.2.1 Multiple CSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmaildotcom Date: 07. February 2010...

CVE-2009-4555

Multiple cross-site request forgery CSRF vulnerabilities in AgoraCart 5.2.005 and 5.2.006 and AgoraCart GOLD 5.5.005 allow remote attackers to hijack the authentication of administrators for requests that 1 modify a .htaccess file via an unspecified request to protected/manager.cgi or 2 change th...

CVE-2009-4555

Multiple cross-site request forgery CSRF vulnerabilities in AgoraCart 5.2.005 and 5.2.006 and AgoraCart GOLD 5.5.005 allow remote attackers to hijack the authentication of administrators for requests that 1 modify a .htaccess file via an unspecified request to protected/manager.cgi or 2 change th...

The wind phase with the guestbook v3. 2 build 0 9 1 2 0 1 vulnerability-vulnerability warning-the black bar safety net

Wind phase with the guestbook v3. 2 build 0 9 1 2 0 1 multiple vulnerabilities Download Script : http://down.chinaz.com/soft/22331.htm Author : bl4ck Contact : bl4ck4tlivedotcn Blog : http://user.qzone.qq.com/271174530 Dork : No DoRk f0R ScRipT KiDDieS Description : This system is new to write...

CVE-2009-4407

Multiple cross-site request forgery CSRF vulnerabilities in PyForum 1.0.3 and possibly earlier versions, and possibly zForum, allow remote attackers to hijack the authentication of victims for requests that change passwords, and other unspecified requests, via unknown vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in PyForum 1.0.3 and possibly earlier versions, and possibly zForum, allow remote attackers to hijack the authentication of victims for requests that change passwords, and other unspecified requests, via unknown vectors...

CVE-2009-4407

CVE-2009-4407 involves multiple CSRF vulnerabilities in PyForum 1.0.3 and possibly earlier versions, and possibly zForum. The vulnerabilities allow remote attackers to hijack a victim’s authenticated session to perform state-changing requests (e.g., password changes) and other unspecified actions...

CVE-2009-4407

Multiple cross-site request forgery CSRF vulnerabilities in PyForum 1.0.3 and possibly earlier versions, and possibly zForum, allow remote attackers to hijack the authentication of victims for requests that change passwords, and other unspecified requests, via unknown vectors...