CVE-2018-10236

POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui\controllers\admin\Syscontroller.php 'add' function because an attacker can control the value of $data'name' with no restrictions, and this value is written to the FCPATH.$file file...

CVE-2018-9991

Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter...

CVE-2018-7733

An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/addpost.html...

CPP-Ethereum JSON-RPC Security Bypass Vulnerability

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. A security bypass vulnerability exists in the adminaddPeer API for JSON-RPC in CPP-Ethereum commit version...

Joomla! Realtyna RPL (com_rpl) component cross-site request forgery vulnerability

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features.Realtyna RPL comrpl component is one of the real estate information component. A cross-site request forgery vulnerabili...

CVE-2017-9668

In admin\addgroup.php in CMS Made Simple 2.1.6, when adding a user group, there is no XSS filtering, resulting in storage-type XSS generation, via the description parameter in an addgroup action...

Open Upload 0.4.2 - Cross-Site Request Forgery (Add Admin)

Exploit for php platform in category web applications ================================================================================================================ Open Upload 0.4.2 Remote Admin Add CSRF Exploit and Changing Normal user permission...

Open Upload 0.4.2 - Cross-Site Request Forgery (Add Admin)

Open Upload 0.4.2 - Cross-Site Request Forgery Add Admin ================================================================================================================ Open Upload 0.4.2 Remote Admin Add CSRF Exploit and Changing Normal user permission...

Open Upload 0.4.2 - Cross-Site Request Forgery (Add Admin)

================================================================================================================ Open Upload 0.4.2 Remote Admin Add CSRF Exploit and Changing Normal user permission...

Yona CMS 1.3.x Cross Site Request Forgery

Exploit Title: Yona CMS document.forms0.submit;...

Yona CMS - Cross-Site Request Forgery

Exploit for php platform in category web applications document.forms0.submit; 0day.today 2018-01-08...

UliCMS 8.0.1 Cross Site Request Forgery

Affected software: UliCMS 8.0.1 Type of vulnerability: admin add exploit csrf URL: http://en.ulicms.de/ Discovered by: Provensec Website: http://www.provensec.com version 8.0.1 Proof of concept...

Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit

No description provided by source. KAPDA - Security Science Researchers Institute Advisory : http://www.kapda.ir/advisory-337.html Vendor : http://www.nukedit.com/ What is : Nukedit is a Free Content Management Vulnerability : Unauthorized Admin Add Exploit if register.asp be enable! Discovered :...

Traidnt Up 3.0 CSRF Vulnerability

No description provided by source. Title : TRAIDNT UP Version 3.0 - CSRF Add Admin Script : TRAIDNT UP Version 3.0 Language : Php Download : http://www.traidnt.net http://www.traidnt.net/vb/attachment.php?attachmentid=519880&d=1285278011 Date : 2010/12/25 Version : 3.0 Dork : Powered by TRAIDNT U...

RV Shopping Cart - Cross-Site Request Forgery

Exploit Title: RV Shopping cart CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

VamCart 0.9 Cross Site Request Forgery

Exploit Title: VamCart v0.9 CSRF Vulnerability Date: 20/08/2012 Author: DaOne Software Link: http://vamcart.googlecode.com/files/vamcart.zip Greetings to: LCA CSRF Add Admin:...

PBBoard 2.1.4 Authentication Bypass / Admin Add Exploit

Exploit for php platform in category web applications 14/7/2012 , Vulnerability discovered 30/7/2012 , Vendor Reported 31/7/2012 , patch released 01/8/2012 , Public disclosure engine/engine.class.php $this-CONF'adminusernamecookie' = 'PowerBBadminusername'; $this-CONF'adminpasswordcookie' =...

AM4SS 1.2 Cross Site Request Forgery

Title : AM4SS Version 1.2 - CSRF add Admin Script : AM4SS Version 1.2 Language : Php Download : http://am4ss.org/am4ss.tar.gz Date : 2011/09/09 Version : 1.2 Dork : "Powered by AM4SS " Found : by red virus [email protected] Homepage : www.alm3refh.com document.r3dvirus.submit; greats 2 alm3refh.com -...

N - 1 3 news 3.4 remote admin add CSRF vulnerability-vulnerability warning-the black bar safety net

EXP: the html head titleRemote Admin Add CSRF Exploit/title /head H2Remote Admin Add CSRF Exploit by qing-Edit/H2 formmethod="POST"name="form0"action="http://localhost/news/admin.php?action=options&mod=accounts&create=new" inputtype="hidden"name="accountname"value="admin" /...

N-13 News 3.4 Remote Admin Add CSRF Exploit

Exploit for php platform in category web applications Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz : Dev-PoinT.com ; hack-book.com // GlaDiatOr ; Coffin Of Evil ;The Sword; Cyber-Err0r ; R3d-D3v1L special...