OrangeHRM 跨站脚本漏洞

OrangeHRM is a human resource management system HRM from OrangeHRM USA. The system supports personnel information management, leave management, time and attendance management and recruitment management, etc. A cross-site scripting vulnerability exists in OrangeHRM v4.10.1, which stems from a lack...

phpEnter 4.2.7 Cross Site Request Forgery

function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "http://sitename/path/addnews.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"; xhr.setRequestHeader"Accept-Language", "en-US,en;q=0.5"; xhr.setRequestHeader"Content-Type"...

BirdBlog 1.4.0 - (Add New Post) Cross-Site Request Forgery

Exploit for php platform in category web applications document.forms0.submit; !--...

phpEnter 4.2.7 - Cross-Site Request Forgery (Add New Post)

phpEnter 4.2.7 - Cross-Site Request Forgery Add New Post function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "http://sitename/path/addnews.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8";...

BirdBlog 1.4.0 - Cross-Site Request Forgery (Add New Post)

document.forms0.submit;...

phpEnter 4.2.7 - Cross-Site Request Forgery (Add New Post)

function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "http://sitename/path/addnews.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"; xhr.setRequestHeader"Accept-Language", "en-US,en;q=0.5"; xhr.setRequestHeader"Content-Type"...

Maian Weblog 4.0 - Cross-Site Request Forgery ( Add New Post)

Exploit for php platform in category web applications Exploit Title : Maian Weblog 4.0 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : - Date : 10/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.maianweblog.com Software link :...

Spacemarc News - Cross-Site Request Forgery (Add New Post)

Exploit Title : Spacemarc News - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : - Date : 10/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.spacemarc.it Software link : http://www.hotscripts.com/listings/jump/download/107255 CSRF PoC function submitRequest...

miniblog 1.0.1 - Cross-Site Request Forgery (Add New Post)

miniblog 1.0.1 - Cross-Site Request Forgery Add New Post Exploit Title : miniblog 1.0.1 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.spyka.net/scripts/php/miniblog Software link :...

miniblog 1.0.1 - Cross-Site Request Forgery (Add New Post)

Exploit for php platform in category web applications Exploit Title : miniblog 1.0.1 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.spyka.net/scripts/php/miniblog Software link :...