ASPMass Shopping Cart - Arbitrary File Upload Cross-Site Request Forgery

ASPMass Shopping Cart - Arbitrary File Upload Cross-Site Request Forgery ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-30-aspmass-shopping-cart-vulnerability-file-upload-csrf/ ''' Abysssec...

Hesk Help Desk 2.1 XSRF

Exploit for unknown platform in category web applications ======================= Hesk Help Desk 2.1 XSRF ======================= Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Deitirilebilinir. author : The.Morpheus The.Morpheus " /...

Hesk Help Desk 2.1 - Cross-Site Request Forgery

Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Deitirilebilinir. author : The.Morpheus The.Morpheus " / YES access to all features and categories NO you can limit features and categories Support Billing Advertising/l...

Hesk Help Desk 2.1 - Cross-Site Request Forgery

Hesk Help Desk 2.1 - Cross-Site Request Forgery Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Deitirilebilinir. author : The.Morpheus The.Morpheus " / YES access to all features and categories NO you can limit features and categorie...

Viscacha 0.8 Gold persistant XSS vulnerability

Exploit for unknown platform in category web applications ============================================== Viscacha 0.8 Gold persistant XSS vulnerability ============================================== Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/...

Almnzm (COOKIE: customer) Remote SQL Injection Vulnerability

No description provided by source. ? printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ ---Script Almnzm SQL INJECTION /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ ---"Powered by Almnzm" /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ ---admin cookie create |QQQQ/ By Qabandi \QQQQ| ---Add PhP Ext |QQQQ| |QQQQ|...

Almnzm SQL Injection

^/", $content, $out, PREGPATTERNORDER; return $out10; $packet ="GET ".$p."index.php?action=creatticket&step=2 HTTP/1.0\r\n"; $packet.="User-Agent: Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1\r\n"; $packet.="Pragma: no-cache\r\n"; $packet.="Cookie:...

[DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...

[DSECRG-09-008] JOnAS(4.10.3) - Linked XSS Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-008 ------------------link to original advisory -------------------------- http://www.dsecrg.com/pages/vul/show.php?id=81 Application: JOnAS Java Open Application Server Versions Affected: JOnAS4.10.3 / Apache Tomcat 5.5.26 Vendor URL:...

CVE-2008-5784

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

PT-2008-6834 · V3 · V3 Chat

Name of the Vulnerable Software and Affected Versions: V3 Chat - Profiles/Dating Script version 3.0.2 Description: The issue allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1. Recommendations: For version 3.0.2, as a temporary...

phpAddEdit 1.3 Login Bypass

------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Set admin cookie so favorite form field will sho...

PhpAddEdit 1.3 (Cookie) Login Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================== PhpAddEdit 1.3 Cookie Login Bypass Vulnerability ================================================== ------------------------------------- PhpAddEdit 1.3 Login By Pass...

PhpAddEdit 1.3 - cookie Authentication Bypass

PhpAddEdit 1.3 - cookie Authentication Bypass ------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Se...

Stash 1.0.3 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================== Stash 1.0.3 Insecure Cookie Handling Vulnerability ================================================== ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdis...

flexcms-xss.txt

---------------------------------------------------------------- Script : FlexCMS alertdocument.cookie Attacker can hijack admin cookie with this vulnerability .... Solution for patch : filter PreviousColorsString variable with htmlspecialchars function...

CVE-2008-3602: Undefined Security Weakness

admin/wradmin.php in PHP-Ring Webring System aka uPHPringwebsite 0.9.1 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

PHP-Ring Webring System 0.9.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ==================================================================== PHP-Ring Webring System 0.9.1 Insecure Cookie Handling Vulnerability ==================================================================== ------- DESCRIPTION: PHP-Ring...

Authentication flaw

LiteNews 0.1 aka 01, and possibly 1.2 and earlier, allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie...

CVE-2008-3508: Undefined Security Weakness

LiteNews 0.1 aka 01, and possibly 1.2 and earlier, allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie...