"ecshop修改任意用户密码漏洞"的CSRF利用

简要描述： ecshop在设计认证机制的时候存在一个问题，导致恶意用户可以窃取其他用户的密码，这个过程可以通过xss和csrf实现 Demo For:http://www.wooyun.org/bug.php?action=view&id=395 详细说明： 利用csrf和xss可以突破官方所说的“障碍” xss版本已经有人说明 这里给出csrf版本 漏洞证明： document.forms0.submit; 构造该网页，用户在登录情况下访问该网页将导致email以及一些其他安全信息丢失...

ecshop修改任意用户密码漏洞

简要描述： ecshop在设计认证机制的时候存在一个问题，导致恶意用户可以窃取其他用户的密码 详细说明： 在ecshop的权限机制当中修改密码是需要知道原密码的，但是修改用于取回密码的Email却不需要任何其他的限制，是一个典型的设计错误，成功利用此漏洞可以修改其他用户的密码 漏洞证明： 1 构建html页面和修改email的参数诱骗用户访问 2 通过修改的email找回密码即可获得其他用户的权限...

Stolen Keylogged Info Being Openly Shared

Keystroke-logging computer viruses let crooks steal your passwords, and sometimes even read your e-mails and online chats. Recently, however, anonymous criminals have added insult to injury, releasing a keylogger that publishes stolen information for all the world to see at online notepad sharing...

Apache Foundation Hit by Targeted XSS Attack

Combining a cross-site scripting XSS vulnerability with a TinyURL redirect, hackers successfully broke into the infrastructure for the open-source Apache Foundation in what is being described as a “direct, targeted attack.” The hackers hit the server hosting the software that Apache.org uses to i...

Abroad a Blog program 0day-vulnerability warning-the black bar safety net

Author: YJPS reprint please indicate the Recently bored to go abroad on the site wandering around and see a nice Blog system, you can register the user and assign a secondary directory. The more boring it is to detect the next, the following is the analysis of the results. Site: Vulnerability...

ZenPhoto Gallery 1.2.5 Admin Password Reset (CRSF)

Exploit for unknown platform in category web applications ================================================== ZenPhoto Gallery 1.2.5 Admin Password Reset CRSF ================================================== ?php Zen Photo Adminstrator Password Steal/Reset Exploit...

CVE-2009-1707

Apple Safari

Cache-poisoning attack snares top Brazilian bank

From The Register Dan Goodin One of Brazil’s biggest banks has suffered an attack that redirected its customers to fraudulent websites that attempted to steal passwords and install malware, according to an unconfirmed report. According to this Google translation of an article penned in Portuguese...

Comdev News Publisher Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Comdev News Publisher Remote SQL Injection Vulnerability ========================================================...

PR06-12: XSS on BEA Plumtree Foundation and AquaLogic Interaction portals

PR06-12: XSS on BEA Plumtree Foundation and AquaLogic Interaction portals Description: BEA Plumtree Foundation portal 6.0 and BEA AquaLogic Interaction 6.1 are vulnerable to a XSS vulnerability affecting the 'name' parameter which is submitted to the '/portal/server.pt' server-side script. Date...

ProCheckUp Security Advisory 2006.12

PR06-12: XSS on BEA Plumtree Foundation and AquaLogic Interaction portals Description: BEA Plumtree Foundation portal 6.0 and BEA AquaLogic Interaction 6.1 are vulnerable to a XSS vulnerability affecting the 'name' parameter which is submitted to the '/portal/server.pt' server-side script. Date...

Design/Logic Flaw

GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges...

PT-2008-1820 · Ge Fanuc · Ge Fanuc Proficy Real-Time Information Portal

Name of the Vulnerable Software and Affected Versions: GE Fanuc Proficy Real-Time Information Portal versions 2.6 and earlier Description: The issue allows remote attackers to steal passwords and gain privileges due to the use of HTTP Basic Authentication, which transmits usernames and passwords ...

gmailsteal_local.scpt.txt

-- This script can be used to steal gmail's keychained password by injecting -- Javascripts into Safari. When executed it opens gmail's login page, reads -- saved password and prompts it into an alert box. -- It can be easly modified to steal other pass. -- poplix papuasia.org --...

[Full-disclosure] H4CREW-000005 EasyNews Pro 4.0 XSS & CSRF

I luv u Ms. Phisher u d4 d1am0nds 1n My Ski h4xorCrew Advirosy 5: Easynews PRO 4.0 XSS and CRSF =================================================== "the game of secuirity is like a sord fight you must think furst b4 you m0ve" H-4 h3r3 2 stay cuz we in da h0uz h4xorcewz n da house and r4w we g0nna...

security flaw

The 1 Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the 2 Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a...

security flaw

The 1 Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the 2 Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a...

Show Password Admin In Script Uploadscript

Theif Password Script UploadScript All Versions To 1.02 Discovered By : Hasadya Raed Contact : [email protected] Script : UploadScript V1.0/ 1.02 Dark : Powered by Uploadscript v1.0/v1.02 Only Add This File After The Link : password.txt Expl : Http://www.Victim.Com/ScriptPath/password.txt Example ...

security flaw

The 1 Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the 2 Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a...

CVE-2006-6077

The 1 Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the 2 Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a...