312 matches found
Joomla! < 2.5.2 - Admin Creation
!/usr/bin/python3 CVE-2012-1563: Joomla! = 2.5.2 Admin Creation cf Source: https://www.ambionics.io/blog/cve-2016-9838-joomla-account-takeover-and-remote-code-execution import bs4 import requests import random url = 'http://vmweb.lan/joomla-cms-2.5.2/' formurl = url +...
ApPHP MicroCMS 3.9.5 Cross Site Request Forgery
Exploit Title :----------------- : ApPHP MicroCMS 3.9.5 - Cross-Site Request Forgery Add Admin Main Author :------------------------ : Besim Google Dork :---------------- : - Date :-------------------------- : 12/10/2016 Type :-------------------------- : webapps Platform : -------------------- :...
CSRF Vulnerability in YxCMS v1.3.7
YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. A CSRF vulnerability exists in the controller call location of YxCMS version 1.3.7. An attacker can exploit the vulnerability to write arbitrary code, and can use the edited php template file to replace t...
RaiseDreams Crowdfunding System version 2.2.4 SQL Injection Vulnerability in '/User/Handler1.ashx' File
RaiseDreams is an enterprise-level crowdfunding website platform. A SQL injection vulnerability exists in the '/User/Handler1.ashx' file in version 2.2.4 of the RaiseDreams Crowdfunding System, which allows an attacker to exploit the vulnerability to execute SQL statements, as well as add a super...
Nagios Network Analyzer 2.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities
Credits: John Page hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/NAGIOS-NA-v2.2.1-MULTIPLE-CSRF.txt + ISR: ApparitionSec Vendor: =============== www.nagios.com Product: ============================== Nagios Network Analyzer v2.2.1 Netflow...
FiverrScript Cross-Site Request Forgery Vulnerability
FiverrScript is a set of Fiverr scripts used to create websites. The FiverrScript administrator/adminscreate.php scripts are vulnerable to cross-site request forgery, which allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to perform maliciou...
WordPress <= 1.5.1.1 - "add new admin" SQL Injection
...
AIOCP 1.4.001 CSRF Vulnerability
No description provided by source. Source: http://packetstormsecurity.org/files/view/98247/AIOCP-1.4.001-xsrf.txt !------------------------------------------------------------------------ Software................AIOCP All In One Control Panel 1.4.001 Vulnerability...........Cross-site Request...
Front Accounting 2.3.4 CSRF Vulnerability
No description provided by source. Software................Front Accounting 2.3.4 Vulnerability...........Cross-site Request Forgery Threat Level............Low 1/5 Download................http://frontaccounting.com/wb3/ Discovery Date..........4/27/2011 Tested On...............Windows Vista +...
VamCart 0.9 - Cross-Site Request Forgery
VamCart 0.9 - Cross-Site Request Forgery Exploit Title: VamCart v0.9 CSRF Vulnerability Date: 20/08/2012 Author: DaOne Software Link: http://vamcart.googlecode.com/files/vamcart.zip Greetings to: LCA CSRF Add Admin:...
Front Accounting 2.3.4 - Cross-Site Request Forgery
Front Accounting 2.3.4 - Cross-Site Request Forgery Software................Front Accounting 2.3.4 Vulnerability...........Cross-site Request Forgery Threat Level............Low 1/5 Download................http://frontaccounting.com/wb3/ Discovery Date..........4/27/2011 Tested...
Front Accounting 2.3.4 - Cross-Site Request Forgery
Software................Front Accounting 2.3.4 Vulnerability...........Cross-site Request Forgery Threat Level............Low 1/5 Download................http://frontaccounting.com/wb3/ Discovery Date..........4/27/2011 Tested On...............Windows Vista + XAMPP...
Front Accounting 2.3.4 CSRF Vulnerability
Exploit for php platform in category web applications Software................Front Accounting 2.3.4 Vulnerability...........Cross-site Request Forgery Threat Level............Low 1/5 Download................http://frontaccounting.com/wb3/ Discovery Date..........4/27/2011 Tested...
eXtplorer 2.1 RC3 Cross Site Request Forgery
------------------------------------------------------------------------ --Description-- A cross-site request forgery vulnerability in eXtplorer 2.1 RC3 can be exploited to create a new admin. --PoC-- input type="hidden"...
GroupOffice 3.6.22 Cross Site Request Forgery
------------------------------------------------------------------------ --Description-- A cross-site request forgery vulnerability in GroupOffice 3.6.22 can be exploited to create a new admin. --PoC-- input type="hidden" name="modules"...
Tugux CMS 1.0_final Multiple Vulnerabilities
Exploit for php platform in category web applications Vulnerable Web-App : Tugux CMS 1.0final Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email : email protected Google-Dork : "Copyright 2010-2011 Tugux CMS" Tested on : Ubuntu 10.04 Web-App :...
N-13 News 4.0 - Cross-Site Request Forgery (Add Admin)
N-13 News 4.0 CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://n-13news.googlecode.com/files/n13news4.0.1.zip .:. Tested On Demo : http://network-13.com/news/ .:. Home :...
dotProject 2.1.5 CSRF Vulnerability
Exploit for php platform in category web applications input type="hid...