4939 matches found
CVE-2009-0648
Multiple cross-site request forgery CSRF vulnerabilities in the manageusers handler in admin/index.php in Falt4 CMS aka Falt4 Extreme RC4 allow remote attackers to hijack the authentication of administrators for requests that change passwords via the 1 edit and 2 editnow actions...
Openfiler 2.3 (Auth Bypass) Remote Password Change Exploit
No description provided by source. Exploit code PoC for OpenFiler 2.3 current by just a nonroot user http://nonroot.blogspot.com/ import urllib,sys,re host example: https://192.168.20.5:446/ host=rawinput"OpenFiler system include http and /: " Super admin user user='openfiler' What pass do you...
Openfiler 2.3 Password Change
Exploit code PoC for OpenFiler 2.3 current by just a nonroot user http://nonroot.blogspot.com/ import urllib,sys,re host example: https://192.168.20.5:446/ host=rawinput"OpenFiler system include http and /: " Super admin user user='openfiler' What pass do you want? password='nonroot' use it pleas...
OpenFiler 2.3 - (Authentication Bypass) Remote Password Change
Exploit code PoC for OpenFiler 2.3 current by just a nonroot user http://nonroot.blogspot.com/ import urllib,sys,re host example: https://192.168.20.5:446/ host=rawinput"OpenFiler system include http and /: " Super admin user user='openfiler' What pass do you want? password='nonroot' use it pleas...
OpenFiler 2.3 - (Authentication Bypass) Remote Password Change
OpenFiler 2.3 - Authentication Bypass Remote Password Change Exploit code PoC for OpenFiler 2.3 current by just a nonroot user http://nonroot.blogspot.com/ import urllib,sys,re host example: https://192.168.20.5:446/ host=rawinput"OpenFiler system include http and /: " Super admin user...
Openfiler 2.3 (Auth Bypass) Remote Password Change Exploit
Exploit for unknown platform in category web applications ========================================================== Openfiler 2.3 Auth Bypass Remote Password Change Exploit ========================================================== Exploit code PoC for OpenFiler 2.3 current by just a nonroot use...
EggBlog 3.1.10 XSRF Vulnerability
| | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^...
EggBlog 3.1.10 - Cross-Site Request Forgery (Change Admin Password)
| | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^ milw0rm.com 2009-01-01...
FubarForum 1.6 Password Change
..:: R31P0lathotmail.com ::.. Tanx from : str0ke Script : FubarForum Version : 1.6 Dork : "Powered by FubarForum v1.6" /forum/index.php?page=profile&userid=1 Greetz to: Corenamed, Unsecured, Esedark, pax0r, zrallter, th0r... and TerminalHacker...
FubarForum 1.6 - Authentication Bypass Change User Password
FubarForum 1.6 - Authentication Bypass Change User Password ..:: R31P0lathotmail.com ::.. Tanx from : str0ke Script : FubarForum Version : 1.6 Dork : "Powered by FubarForum v1.6" /forum/index.php?page=profile&userid=1 Greetz to: Corenamed, Unsecured, Esedark, pax0r, zrallter, th0r... and...
PHPmotion <= 2.1 CSRF Vulnerability
No description provided by source. PHPmotion = 2.1 CSRF vulnerability Author: Ausome1 Email: [email protected] Website: http://www.enigmagroup.org Description: Change a member's password and/or email...
doop CMS 1.4.0b - Cross-Site Request Forgery Arbitrary File Upload
doop CMS 1.4.0b - Cross-Site Request Forgery Arbitrary File Upload -------------------------------------------------------------------------- | Project: Doop document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello ...
PHPmotion 2.1 - Cross-Site Request Forgery
PHPmotion Source of pwned.html file: Once your victim has visited your evil page, You may now be able to log into their PHPMotion account, using password "password123" an...
ReVou Twitter Clone - Admin Password Change
=== NOTES === . Reset pwd, login as ADMIN, use this path to upload your php-shell-script: http://site.tld/revou/adminlogin/index.php?id=dbimport . your file is here: http://site.tld/revou/dbbackup/shell.php === GGL-DORKS === "Joined ReVou" "Tell the world what you're doing at this moment!" "days...
ReVou Twitter Clone - Admin Password Change
ReVou Twitter Clone - Admin Password Change === NOTES === . Reset pwd, login as ADMIN, use this path to upload your php-shell-script: http://site.tld/revou/adminlogin/index.php?id=dbimport . your file is here: http://site.tld/revou/dbbackup/shell.php === GGL-DORKS === "Joined ReVou" "Tell the wor...
CVE-2008-5567
Cross-site request forgery CSRF vulnerability in admin/adsettings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...
CVE-2008-5565
Cross-site request forgery CSRF vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...
CVE-2008-5567
Cross-site request forgery CSRF vulnerability in admin/adsettings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...
CVE-2008-5568
The CVE-2008-5568 entry describes a CSRF vulnerability in IPN Pro 3 (version 1.44 and earlier) affecting admin/settings.php. An attacker could change the admin password by exploiting a logout action using the admin_id, newpass_1, and newpass_2 parameters. The public technical details in the conne...
DD-WRT v24-sp1 (XSRF) Cross Site Reference Forgery Exploit
Exploit for hardware platform in category remote exploits ========================================================== DD-WRT v24-sp1 XSRF Cross Site Reference Forgery Exploit ========================================================== Remote root dd-wrt...