Google Plugs High-Risk Holes in Chrome Browser

Google has released version 4.1.249.1059 of Chrome for Windows, a security update that addresses four high risk vulnerabilities in its WebKit-based browser. These vulnerabilities are; a memory corruption issue in Chrome’s V8 JavaScript Engine, type confusion errors with forums, cross-site scripti...

e107 version 0.7.19 XSRF vulnerability

Exploit for php platform in category web applications ====================================== e107 version 0.7.19 XSRF vulnerability ====================================== Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April...

Callisto <= 1.1.5 pl5 (FPD/XSS/XSRF) Multiple Vulnerability

Exploit for php platform in category web applications =========================================================== Callisto = 1.1.5 pl5 FPD/XSS/XSRF Multiple Vulnerability =========================================================== Exploit Title: Callisto = 1.1.5 pl5 FPD/XSS/XSRF Multiple...

Multiple vulnerabilities in Zikula Application Framework

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Zikula Application Framework, which can be exploited to perform cross-site scripting XSS and cross-site request forgery CSRF attacks. 1 XSRF CSRF in Zikula Application Framework: CVE-2010-1732 The vulnerability...

BPTutors Tutoring Site Script XSRF

Title: BPTutors Tutoring site script - CSRF Create Administrator Account Date: 26/3/2010 Author: bi0 Software: http://bpowerhouse.info/tutoring-site-script.htm Version: 1.0 Code : /\ == \ /\ \ /\ \ \ \ Admin 6+ Passwd 6+ Frist Name Last Name Email a class='classa'...

New-CMS 1.08 LFI / XSS / XSRF / Shell Upload

Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...

New-CMS v1.08 Multiple Vulnerability

Exploit for unknown platform in category web applications ==================================== New-CMS v1.08 Multiple Vulnerability ==================================== Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested...

AlegroCart 1.1 Cross Site Request Forgery

---------------------------------------------------------------- + Home Of AlegroCart v1.1 - Xsrf Change Administrator Password // Author Info x Author: The.Morpheus x Contact: [email protected] x Thanks: Türksec.İnfo Nd And Tg Tayfa :P x Date : 01.02.2010...

Home Of AlegroCart 1.1 - Cross-Site Request Forgery (Change Administrator Password)

Home Of AlegroCart 1.1 - Cross-Site Request Forgery Change Administrator Password ---------------------------------------------------------------- + Home Of AlegroCart v1.1 - Xsrf Change Administrator Password // Author Info x Author: The.Morpheus x Contact: [email protected] x Thanks:...

Home Of AlegroCart v1.1 - [ Xsrf] Change Administrator Password

Exploit for unknown platform in category web applications =============================================================== Home Of AlegroCart v1.1 - Xsrf Change Administrator Password =============================================================== Download :...

Allomani Audio and Video Library 2.7.0 XSRF Vulnerability (Add Admin)

Exploit for php platform in category web applications .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://allomani.com/en/audioandvideoscript.html === Exploit === 0day.today 2018-03-19...

Unsafe usage of unserialize function.

PMASA-2010-3 Announcement-ID: PMASA-2010-3 Date: 2010-01-15 Updated: 2010-01-27 Summary Unsafe usage of unserialize function. Description phpMyAdmin used the unserialize PHP function on potentially unsafe data in setup script, what could be potentially used for XSRF attack, which can lead to code...

Hesk Help Desk Cross Site Request Forgery

Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Değiştirilebilinir. author : The.Morpheus Demo : http://www.hesk.com/demo/admin/ The.Morpheus " / YES access to all features and categories NO you can limit features and categories Suppo...

Hesk Help Desk 2.1 - Cross-Site Request Forgery

Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Deitirilebilinir. author : The.Morpheus The.Morpheus " / YES access to all features and categories NO you can limit features and categories Support Billing Advertising/l...

Hesk Help Desk 2.1 - Cross-Site Request Forgery

Hesk Help Desk 2.1 - Cross-Site Request Forgery Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Deitirilebilinir. author : The.Morpheus The.Morpheus " / YES access to all features and categories NO you can limit features and categorie...

Hesk Help Desk 2.1 XSRF

Exploit for unknown platform in category web applications ======================= Hesk Help Desk 2.1 XSRF ======================= Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Deitirilebilinir. author : The.Morpheus The.Morpheus " /...

easyPortal 1.0.0 XSS / XSRF

----------------------------------------------------------------------------------------------- Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 02. January 2010. ----------------------------------------------------------------------------------------------- Application: easyPortal...

eazyPortal 1.0.0 - Multiple Vulnerabilities

----------------------------------------------------------------------------------------------- Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 02. January 2010. ----------------------------------------------------------------------------------------------- Application: eazyPortal...

eazyPortal 1.0.0 - Multiple Vulnerabilities

eazyPortal 1.0.0 - Multiple Vulnerabilities ----------------------------------------------------------------------------------------------- Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 02. January 2010...

easyPortal v1.0.0 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ========================================== easyPortal v1.0.0 Multiple Vulnerabilities ========================================== ----------------------------------------------------------------------------------------------- Application:...