Lucene search
+L

4941 matches found

OSV
OSV
added 2009/12/23 6:30 p.m.14 views

CVE-2009-3580

Cross-site request forgery CSRF vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, newpassword, and confirmpassword parameters in a preferences action...

7.5AI score
SaveExploits0References3
NVD
NVD
added 2009/12/23 6:30 p.m.38 views

CVE-2009-3580

Cross-site request forgery CSRF vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, newpassword, and confirmpassword parameters in a preferences action...

6.8CVSS7.2AI score0.00594EPSS
SaveExploits1References3
OSV
OSV
added 2009/12/23 6:30 p.m.57 views

DEBIAN-CVE-2009-3580

Cross-site request forgery CSRF vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, newpassword, and confirmpassword parameters in a preferences action...

6.8CVSS7.5AI score0.00594EPSS
SaveExploits1References1
OSV
OSV
added 2009/12/23 6:30 p.m.48 views

UBUNTU-CVE-2009-3580

Cross-site request forgery CSRF vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, newpassword, and confirmpassword parameters in a preferences action...

6.8CVSS5.9AI score0.00594EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2009/12/23 6:00 p.m.51 views

CVE-2009-3580

Cross-site request forgery CSRF vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, newpassword, and confirmpassword parameters in a preferences action...

7.2AI score0.00594EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2009/12/23 6:00 p.m.68 views

CVE-2009-3580

Cross-site request forgery CSRF vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, newpassword, and confirmpassword parameters in a preferences action...

6.8CVSS6.9AI score0.00594EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2009/12/17 12:00 a.m.17 views

Jobscript4Web 3.5 XSRF

/\ == \ /\ \ /\ \ \ \ ================================================================ // CSRF to Change Admin Password ========================================================...

SaveExploits0
seebug.org
seebug.org
added 2009/12/17 12:00 a.m.24 views

Jobscript4Web 3.5 Multiple CSRF Vulnerability

No description provided by source. Title: Jobscript4Web 3.5 Multiple CSRF Vulnerability Date: 17/12/2009 Author: bi0 Software Link: http://www.jobscript4web.com/ Version: 3.5 CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/12/17 12:00 a.m.33 views

Jobscript4Web 3.5 - Multiple Cross-Site Request Forgery Vulnerabilities

Title: Jobscript4Web 3.5 Multiple CSRF Vulnerability Date: 17/12/2009 Author: bi0 Software Link: http://www.jobscript4web.com/ Version: 3.5 CVE : /\ == \ /\ \ /\ \ \ \ input name="Submit" type=...

5.8AI score
SaveExploits0
zdt
zdt
added 2009/12/15 12:00 a.m.23 views

DubSite CMS v1.0 CSRF Vulnerability

Exploit for unknown platform in category web applications =================================== DubSite CMS v1.0 CSRF Vulnerability =================================== Pentest Information: ==================== Connection has discovered a Cross Site Request ForgeryCSRF vulnerability in DubSite CMS...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2009/12/15 12:00 a.m.11 views

DubSite CMS v1.0 CSRF Vulnerability

No description provided by source. Pentest Information: ==================== Connection has discovered a Cross Site Request ForgeryCSRF vulnerability in DubSite CMS v1.0 Details ======= Tested on OS: Windows XP Tested with Software: Mozilla Firefox 3.5.x Vulnerable Products: DubSite CMS Affected...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2009/12/15 12:00 a.m.20 views

DubSite CMS 1.0 - Cross-Site Request Forgery

DubSite CMS 1.0 - Cross-Site Request Forgery Pentest Information: ==================== Connection has discovered a Cross Site Request ForgeryCSRF vulnerability in DubSite CMS v1.0 Details ======= Tested on OS: Windows XP Tested with Software: Mozilla Firefox 3.5.x Vulnerable Products: DubSite CMS...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/12/15 12:00 a.m.25 views

DubSite CMS 1.0 Cross Site Request Forgery

Pentest Information: ==================== Connection has discovered a Cross Site Request ForgeryCSRF vulnerability in DubSite CMS v1.0 Details ======= Tested on OS: Windows XP Tested with Software: Mozilla Firefox 3.5.x Vulnerable Products: DubSite CMS Affected Versions: 1.0 Vulnerability Type:...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/12/15 12:00 a.m.25 views

Ez News Manager / Pro - Cross-Site Request Forgery (Change Admin Password)

----------------------------------------------------------------------------------------------- Title: Ez News Manager / Pro - XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

5.8AI score
SaveExploits0
seebug.org
seebug.org
added 2009/12/14 12:00 a.m.19 views

Mail Manager Pro XSRF (Change Admin Password)

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Mail Manager Pro XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009. Application: Mail Manager Pro...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/12/13 12:00 a.m.24 views

Acc PHP eMail 1.1 XSRF

view source print? /\ == \ /\ \ /\ \ \ \ // End of attack ------------------------------------------------------------------------------------------ EOF...

7.4AI score
SaveExploits0
myhack58
myhack58
added 2009/12/13 12:00 a.m.23 views

Local non-root access universal change the MYSQL password method-vulnerability warning-the black bar safety net

Open CMD first, stop the mysql service net stop mysql Enter the mysql installation directory under the bin folder, and then enter mysqld-nt --skip-grant-tables Skip password detection And then in addition a new open a cmd window Input mysql and return can to root access into mysql use mysql updat...

2.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/12/13 12:00 a.m.42 views

Acc PHP eMail 1.1 - Cross-Site Request Forgery

/\ == \ /\ \ /\ \ \ \ // End of attack ------------------------------------------------------------------------------------------ EOF...

6.8CVSS5.8AI score0.01068EPSS
SaveExploits2
Prion
Prion
added 2009/11/29 1:07 p.m.26 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords...

6.8CVSS7.7AI score0.05365EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2009/11/27 8:45 p.m.55 views

CVE-2009-4092

The CVE-2009-4092 entry describes a Cross-site request forgery (CSRF) vulnerability in Simplog 0.9.3.2 (and possibly earlier) affecting the user.php component. The underlying issue enables remote attackers to hijack the authentication of administrators and users to perform password-change request...

6.8CVSS7.2AI score0.05365EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder