CVE-2009-3759

Multiple cross-site request forgery CSRF vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to hijack the authentication of administrators for 1 requests that change the password via the username parameter to config/changepw.php or 2 stop a...

QuickCart 3.x - Cross-Site Scripting Cross-Site Request Forgery Local File Inclusion Directory Traversal

QuickCart 3.x - Cross-Site Scripting Cross-Site Request Forgery Local File Inclusion Directory Traversal DISCOVERED: Paweł 'kl3ryk' Łaskarzewski GREETZ: hawk, pin3ska, black ant, qwert666, ua and gacmaan DIRECTORY TRAVERSAL http://victim.com/?p=ONE OF THE EXISITING FILES-EXISITING ACTION IN THI...

CVE-2007-6730

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that 1 enable remote router management via goform/formRmtMgt or 2 modify the administrator passwor...

The use of components plus the user-to vulnerability and early warning-the black bar safety net

by:lcx Today research about the user control panel file nusrmgr. cpl, the discovery call is to the Shell. Users to add users, it also simultaneously calls the wscript. shell, Shell. Application, Shell. LocalMachine these three components. But added to the user while this one Shell. Users is...

NetRisk Security Bypass Vulnerability

NetRisk is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NetRisk Security Bypass Vulnerability

This host is installed with NetRisk and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbnetrisksecbypassvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ NetRisk Security Bypass Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2008-7155

NetRisk 1.9.7 does not properly restrict access to admin/changesubmit.php, which allows remote attackers to change the password of arbitrary users via a direct request...

CVE-2008-7155

NetRisk 1.9.7 does not properly restrict access to admin/changesubmit.php, which allows remote attackers to change the password of arbitrary users via a direct request...

CMSphp 0.21 Cross Site Request Forgery

Author: REMOVED AT REQUEST OF AUTHOR CMS: CMSphp 0.21 Type of vulnerability: Cross site request forgery You can download following cms on : http://webscripts.softpedia.com/script/Content-Management/CMSphp-37567.html CMSphp 0.21 suffers from Cross site request forgery which allows malicious attack...

eBay to developers: Change your passwords

From IDG News Service Juan Carlos Perez Members of the eBay Developers Program must change their account passwords because the e-commerce company recently discovered a way in which account information could be accessed by malicious hackers. This requirement comes “out of an abundance of caution” ...

Nwahy Dir 2.1 - Arbitrary Change Admin Password

......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwahy scripts v1 3. Nwahy book v1 - Note : Path to Control Panel "/admincp/" . / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function Usage print "\n\n"; print...

Default credentials

The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain access...

Fedora Core 9 FEDORA-2009-6279 (pam_krb5)

The remote host is missing an update to pamkrb5 announced via advisory FEDORA-2009-6279. OpenVAS Vulnerability Test $Id: fcore20096279.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6279 pamkrb5 Authors: Thomas Reinke Copyright: Copyright c 2009...

Elgg Cross Site Scripting / Request Forgery

CMS Elgg uploading to a host.Save as cookie.php +Exploit: ------- 1 Register in The SIte 2 add to the Template The victim would be anyone who comes to your blog. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++...

CMS Buzz (XSS/PC/HI) Multiple Remote Vulnerabilities

CMS Buzz xss/Change PasswordMultiple Remote Vulnerabilities + Discovered By xhaxkerx + Vendor: http://www.c99.mobi + Note : If you are The S3r!0uS I say To Fuck you Because You are Hacked Site Of My Best Friends dz-boys.com + Demo:http://demo.cmsbuzz.com/ + Greeting : yasin Remote Changing...

CMS Buzz (XSS/PC/HI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== CMS Buzz XSS/PC/HI Multiple Remote Vulnerabilities ==================================================== + CMS Buzz xss/Change PasswordMultiple Remote Vulnerabilities + Discovered By ThE...

CMS buzz - Cross-Site Scripting / Password Change / HTML Injection

CMS Buzz xss/Change PasswordMultiple Remote Vulnerabilities + Discovered By ThE g0bL!N + Vendor:cmsbuzz.com + Note : If you are The S3r!0uS I say To Fuck you Because You are Hacked Site Of My Best Friends dz-boys.com + Demo:http://demo.cmsbuzz.com/ + Greeting : All my freinds Dz Remote Changing...

CMS buzz - Cross-Site Scripting Password Change HTML Injection

CMS buzz - Cross-Site Scripting Password Change HTML Injection + CMS Buzz xss/Change PasswordMultiple Remote Vulnerabilities + Discovered By ThE g0bL!N + Vendor:cmsbuzz.com + Note : If you are The S3r!0uS I say To Fuck you Because You are Hacked Site Of My Best Friends dz-boys.com +...

CVE-2009-2080

CVE-2009-2080 concerns admin.php in MRCGIGUY The Ticket System 2.0. The vulnerability is a failure to properly restrict access, enabling remote attackers to (1) obtain sensitive configuration information via the editconfig action and (2) change the administrator’s password via the id parameter in...

MRCGIGUY The Ticket System 2.0 PHP Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== MRCGIGUY The Ticket System 2.0 PHP Multiple Remote Vulnerabilities ================================================================== MRCGIGUY The Ticket System 2.0 PHPid...