Spacewalk: CSRF in all web portal forms

Cross-site request forgery CSRF vulnerability in the Spacewalk Java site packages aka spacewalk-java 1.2.39 in Spacewalk, as used in the server in Red Hat Network Satellite 5.3.0 through 5.4.1 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests...

CVE-2011-1721

Cross-site request forgery CSRF vulnerability in php/partieadministrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that 1 modify passwords or 2 add new projects. NOTE: some of these details are obtained from third party...

Allomani E-Store 1.0 - Cross-Site Request Forgery (Add Admin) (2)

E-Store 1.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/storescript.html === Exploit ===...

MeshCMS 3.5 - Remote Code Execution

MeshCMS 3.5 - Remote Code Execution !/usr/bin/python MeshCMS v3.5 remote code execution exploit Environment: Tomcat 7.02/ubuntu 10.04 1 details: There is a add member/editor/admin CSRF vulnerability in this CMS which is very clean for an attacker. The admin will not be told a user has been added...

Xinhua enterprise web site management system v4. 0 XSS0day add administrator and patch-vulnerability warning-the black bar safety net

From:B0mbErM@n Description:online repair function is not to submit the filter Analysis:xiu. asp not be submitted to the filter, resulting in execution of arbitraryXSSstatement. Patch:filter Exp: ../xiu. the asp directly into the repair, then at the contact address written on the SCRIPT...

YourTube v1.0 CSRF Vulnerability (Add User)

Exploit for php platform in category web applications .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.ac4p.com/ .:. Dork : inurl:"Powered by YourTube v1.0" === Exploit === 0day.today 2018-04-09...

Jax Calender admin bypass vulnerability

Exploit for php platform in category web applications ======================================= Jax Calender admin bypass vulnerability ======================================= Exploit Title: Jax Calender admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software Link:...

Pc4Uploader 9.0 Cross-site Request Forgery

Exploit for php platform in category web applications ========================================== Pc4Uploader 9.0 Cross-site Request Forgery ========================================== Exploit Title: pc4uploader XSRF Add Admin Exploit Date: 27-08-2010 Author: RENO TeaM : SauDi ViRuS TeaM SiTe:...

Outlook Web Access 2003 Cross Site Request Forgery

Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/2010 Author: anonymous Tested on: Microsoft Office Outlook Web Access for Exchange Server 2003 A cross-site request forgery vulnerability in Microsoft Office Outlook Web Access for Exchange...

KubeBlog - Cross-Site Request Forgery

KubeBlog - Cross-Site Request Forgery ======================================================================================== | Title : KubeBlog XSRF Vuln. | Author : The.Morpheus | email : [email protected] | Home : http://www.spyturks.com | Date : 03.05.2010 | Script : Copyright © 2008...

AdaptCMS Lite 1.5 - Arbitrary Add Admin

=========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download : http://sourceforge.net/projects/adaptcms/files/AdaptCMS%20Lite%20v1/1.5/AdaptCMSLite1.5.zip/download Advisory ...

Ane CMS CSRF Vulnerability

Exploit for unknown platform in category web applications ========================== Ane CMS CSRF Vulnerability ========================== Vulnerability found in- Admin module Credit by Pratul Agrawal Software AneCMS Category CMS / Portals Plateform php Proof of concept Targeted URL:...

Explay CMS <= 2.1 SQL Injection Vulnerabilities

=============================================== Explay CMS = 2.1 SQL Injection Vulnerabilities =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 ...

Joomla 1.5.15 Persistant XSS Vulnerability

Exploit for unknown platform in category web applications ========================================== Joomla 1.5.15 Persistant XSS Vulnerability ========================================== prog ------------- Joomla 1.5.15 vuln ------------- Persistant XSS in 'Author Alias' source -------------...

PBBoard Version 2.0.5 Mullti Vulnerability

Exploit for unknown platform in category web applications ========================================== PBBoard Version 2.0.5 Mullti Vulnerability ========================================== ======================================================================================== | Title : PBBoard...

TimeClock CSRF Remote Add Admin Exploit

Exploit for unknown platform in category web applications ======================================= TimeClock CSRF Remote Add Admin Exploit ======================================= ============================================================================== » Note : Tribute to the martyrs of Gaza...

TimeClock Cross Site Request Forgery

============================================================================== » Note : Tribute to the martyrs of Gaza . ============================================================================== » TimeClock Remote Add Admin Exploit...

snmp-netstat NSE Script

Attempts to query SNMP for a netstat like output. The script can be used to identify and automatically add new targets to the scan by supplying the newtargets script argument. Script Arguments max-newtargets, newtargets See the documentation for the target library. creds.service, creds.global See...

CPA Site Solutions Remote File Upload Vulnerability

Exploit for unknown platform in category web applications =================================================== CPA Site Solutions Remote File Upload Vulnerability =================================================== |REMOTE FILE UPLOAD VULNERABILTY| .:|cpasitesolutions|::. AUTHOR : R3VANBASTARD...

KubeLance 1.7.6 (Add Admin) CSRF Vulnerability

Exploit for unknown platform in category web applications ============================================== KubeLance 1.7.6 Add Admin CSRF Vulnerability ============================================== -----------------------------------------------------------------------------------------------...