CVE-2013-6826

cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrftoken parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks...

Sonicwall OEM Scrutinizer v9.5.2 - Multiple Vulnerabilities

Title: ====== Sonicwall OEM Scrutinizer v9.5.2 - Multiple Vulnerabilities Date: ===== 2013-02-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=786 VL-ID: ===== 786 Common Vulnerability Scoring System: ==================================== 5.2 Introduction: ============...

phpShop 2.0 - SQL Injection

phpShop 2.0 - SQL Injection Exploit Title : phpshop 2.0 SQL Injection Vulnerability Author : By onestree Software Link : http://code.google.com/p/phpshop/downloads/list tested : windows 7 / ubuntu Dork : inurl:"tanyakan pada rumput yang bergoyang" SQLi p0c: ==================...

CVE-2012-4602

Multiple cross-site scripting XSS vulnerabilities in admin/code/tceselectuserspopup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the 1 cid or 2 uids parameter...

CVE-2012-5909

The CVE covers a SQL injection in MyBB (MyBulletinBoard) 1.6.6. Affected component: admin/modules/user/users.php; root cause: unsafely constructed SQL via the conditions[usergroup][] parameter in a search action to admin/index.php. Impact is partial confidentiality/integrity/availability as per C...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 modules/admin/adminmoduleindex.php, or 3 modules/calendar/customisecalendartimes.php; login parameter to 4 index.ph...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via 1 an arbitrary parameter in a move or 2 minimize action to admin/adminindex.php; 3 the karmausername parameter to module.php in the karma module; 4 q1low, ...

PBBoard 2.1.4 Local File Inclusion

Exploit for php platform in category web applications Exploit Title: PBBoard 2.1.4 Local File Inclusion Software Link: http://www.pbboard.com/PBBoardv2.1.4.zip Author: n4ss1m Date: 25-05-2012 Tested on: win/linux Home : www.Sec4ever.com Exploit-DB note: Need to be logged in, at the very least, as...

Openfire 3.6.4 Multiple CSRF Vulnerabilities

Exploit for jsp platform in category web applications Project: Openfire Severity: High Versions: 3.6.4 other versions may be affected Exploit type: Multiple CSRF Fixes Available: None ------------------------------------------------------------------------...

Axis2 Upload Exec (via REST)

$Id: axis2deployerrest.rb 11178 2010-11-30 18:17:33Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CMS Made Simple 1.7 Cross Site Request Forgery

======================================================================= CMS Made Simple 1.7 CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal...

CMS Made Simple 1.7 - Cross-Site Request Forgery

CMS Made Simple 1.7 - Cross-Site Request Forgery ======================================================================= CMS Made Simple 1.7 CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected]...

CMS Made Simple 1.7 CSRF Vulnerability

Exploit for php platform in category web applications ====================================== CMS Made Simple 1.7 CSRF Vulnerability ====================================== Vulnerability found in- Admin module email email protected company aksitservices Credit by Pratul Agrawal Software CMS Made...

CMS Made Simple 1.7 CSRF Vulnerability

No description provided by source. Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal Software CMS Made Simple 1.7 Category CMS / Portals Site p4ge http://server/demo/2/10/CMSMadeSimple Plateform php Greetz to Gaurav, Prateek, Vivek, Sanja...

CMS Made Simple 1.7 - Cross-Site Request Forgery

======================================================================= CMS Made Simple 1.7 CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal...

Clain_TIger_CMS - Cross-Site Request Forgery

ClainTIgerCMS - Cross-Site Request Forgery ======================================================================= ClainTIgerCMS CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected] company...

ChillyCMS - Cross-Site Request Forgery

ChillyCMS - Cross-Site Request Forgery ======================================================================= chillyCMS CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected] company aksitservices...

Clain_TIger_CMS - Cross-Site Request Forgery

======================================================================= ClainTIgerCMS CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal Software Cl...

ChillyCMS - Cross-Site Request Forgery

======================================================================= chillyCMS CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal Software...

Chilly CMS Cross Site Request Forgery

======================================================================= chillyCMS CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal Software...