DD-WRT v24-sp1 - Cross-Site Reference Forgery

DD-WRT v24-sp1 - Cross-Site Reference Forgery Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product...

PayPal eStore - Admin Password Change

PayPal eStore - Admin Password Change === LIVE === » removed... === Greetz === » ALLAH » Tornado2800 » B13 Â...

PayPal eStore - Admin Password Change

=== LIVE === » removed... === Greetz === » ALLAH » Tornado2800 » B13 » AFSHIN-ZARBAT » QU1E » Hussain-X d...

Design/Logic Flaw

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php...

CVE-2008-5308

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php...

CVE-2008-5221

The accountsave action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and passwordretype parameters...

Design/Logic Flaw

The password change feature admin/cp.php in VideoScript 4.0.1.50 and earlier does not check for administrative authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified npass and npass1 parameters...

Authentication flaw

The accountsave action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and passwordretype parameters...

CVE-2008-5221

CVE-2008-5221 affects wPortfolio 0.3 and earlier. The account_save action in admin/userinfo.php does not require authentication or knowledge of the original password, allowing remote attackers to change the admin password by submitting modified password and password_retype parameters. CVSS data i...

CVE-2008-5219

The password change feature admin/cp.php in VideoScript 4.0.1.50 and earlier does not check for administrative authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified npass and npass1 parameters...

CVE-2008-5219

The vulnerability CVE-2008-5219 affects VideoScript (admin-side) where the password change feature (admin/cp.php) does not verify administrative authentication or original password. This allows remote attackers to change the admin account password by supplying modified npass and npass1 parameters...

CVE-2008-5221

The accountsave action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and passwordretype parameters...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) Change Admin Password Exploit

No description provided by source. ?php / LoveCMS 1.6.2 Final Simple Forum 3.1d Change Admin Password Exploit Vulnerability found & exploited by cOndemned Download: http://www.thethinkingman.net/modules/downloadmanager/?id=4 Description: This exploit changes forum admin password ex. attacker will...

wPortfolio 0.3 - Admin Password Changing

=== XPL ===/ $GNK = "ZWNobyAiPFRJVExFPndQb3J0Zm9saW8gPD0gMC4zIEFkbWluIFBhc3N3b3JkIENoYW5naW5nIEV4". "cGxvaXQgfCBCeTogRzROMEs8L1RJVExFPiI7DQokRzROMEsgPSA8PDxFT0cNCj09PT09PT09PT09". "PT09PT09P...

microcms-modify.txt

!/usr/bin/perl -------------------------------------------------------------- Micro CMS ; ifdefined $admin print STDOUT deladmin$admin; exit; else print STDOUT "+ Not Defined!\n"; exit; if$tell = /change/i print STDOUT "+ Admin ID : "; chomp$admin = ; print STDOUT "+ New Password: "; chomp$passwd...

Micro CMS <= 0.3.5 Remote (Add/Delete/Password Change) Exploit

No description provided by source. !/usr/bin/perl -------------------------------------------------------------- Micro CMS = 0.3.5 Remote Add/Delete/Password Change Exploit StAkeRathotmaildotit http://www.impliedbydesign.com/apps/microcms/microcms.zip...

Micro CMS <= 0.3.5 Remote (Add/Delete/Password Change) Exploit

Exploit for unknown platform in category web applications ============================================================== Micro CMS ; ifdefined $admin print STDOUT deladmin$admin; exit; else print STDOUT "+ Not Defined!\n"; exit; if$tell = /change/i print STDOUT "+ Admin ID : "; chomp$admin = ;...

Micro CMS 0.3.5 - Remote AddDeletePassword Change

Micro CMS 0.3.5 - Remote AddDeletePassword Change !/usr/bin/perl -------------------------------------------------------------- Micro CMS ; ifdefined $admin print STDOUT deladmin$admin; exit; else print STDOUT "+ Not Defined!\n"; exit; if$tell = /change/i print STDOUT "+ Admin ID : "; chomp$admin...

Micro CMS 0.3.5 - Remote Add/Delete/Password Change

!/usr/bin/perl -------------------------------------------------------------- Micro CMS ; ifdefined $admin print STDOUT deladmin$admin; exit; else print STDOUT "+ Not Defined!\n"; exit; if$tell = /change/i print STDOUT "+ Admin ID : "; chomp$admin = ; print STDOUT "+ New Password: "; chomp$passwd...

crux-cookie.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Crux Gallery eNYe-Sec - www.enye-sec.org Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create a simple perl script to send GET and POST packages. Navigate by...