2844 matches found
CVE-2014-7158
Cross-site request forgery CSRF vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to admin/launch...
Travel Portal II 6.0 Cross Site Request Forgery
Travel Portal II 6.0 - CSRF Admin Password Change PoC Exploit My + Author : KnocKout Contactonlymail : [email protected] HomePage : http://Cyber-Warrior.Org - http://h4x0resec.blogspot.com - http://www.cyber-warrior.org/100379 Greetz:...
建站之星Sitestar设计缺陷可CSRF修改管理员密码
简要描述： 没有技术含量的洞。！ 详细说明： WooYun: 建站之星敏感功能csrf 可dump数据库 对于这个洞中厂商的回复感觉坑爹，再来一处CSRF提醒下厂商。 强烈建议查下CSRF的介绍。 /admin/index.php?m=moduser&a=adminupdate&userid=1&passwdpasswd=123123&passwdrepasswd=123123&[email protected]&useractive=1&usersrole=admin&userfullname=&usermobile=&submit=%E4%BF%9D%E5%AD%98...
Design/Logic Flaw
IBM Scale Out Network Attached Storage SONAS 1.3.x and 1.4.x before 1.4.3.3 places an administrative password in the shell history upon use of the -p option to chuser, which allows local users to obtain sensitive information by leveraging root access...
SuperMicro IPMI 4 9 1 5 2 port password leak vulnerability-vulnerability warning-the black bar safety net
2014.06.20 SuperMicro IPMI 4 9 1 5 2 port password leak vulnerability is the foreign media communications http://arstechnica.com/security/2014/06/at-least-32000-servers-broadcast-admin-passwords-in-the-clear-advisory-warns/）,the spirit of the vulnerability of the curious, this article on the...
YidaCms_X3.2逻辑错误造成越权访问,可修改管理密码
简要描述： 因代码逻辑错误,可以构造语句绕过,直接修改管理员密码 详细说明： 最新版的3.2下的 admin\CheckAdmin.asp username = request.Cookies"username" password = request.Cookies"password" cookiesmd5 = request.Cookies"cookiesmd5" dim adminname,adminpass,adminqx,adminaqx set rs = server.createobject"adodb.recordset" sql="select from...
PHPGallery 1.1.0 CSRF Vulnerability
No description provided by source. ------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ :...
Travel Portal Script Admin Password Change - CSRF Vulnerability
No description provided by source. ===================================================== Travel PORTAL = Admin Password Change CSRF Exploit ===================================================== My + Author : KnocKout Contact : [email protected] Software info |Web App. : Travel PORTAL |Price : 299...
Free Monthly Websites 2.0 - Admin Password Change
No description provided by source...
osCommerce 2.2 - CSRF
No description provided by source. Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2 Tested on: Mac OS X 10.6.4, osCommerce v2.2 RC2A Dutch This is the code that you can execute to change the admin pass:...
ZTE Change admin password
No description provided by source. Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV html body onload=javascript:document.forms0.submit H2Exploit By Nuevo Asesino /H2 form method=POST name=form0...
FREEze Greetings 1.0 - Remote Password Retrieve Exploit
No description provided by source. ?php / FREEze Greetings 1.0 Remote Password Retrieve Exploit Exploit by cOndemned Greetz : suN8Hclf, 0in, m4r1usz, str0ke, rtgn, doctor, sid.psycho ... Special thx to ZaBeaTy for developing such a sexy regexp ; Thx m8 / echo Header FREEze Greetings 1.0 Remote...
SmartStuff FoolProof Security Program 3.9.x Administrative Password Recovery Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10467/info FoolProof is prone to a vulnerability that may allow an unprivileged user to recover the administrative password for the application. This issue can ultimately allow an attacker to gain unauthorized...
Guesbara 1.2 Administrator Password Change Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23029/info Guesbara is prone to a vulnerability that may permit attackers to change the administrative password. Exploiting this issue may allow an attacker to gain administrative access to the affected application...
Vacation Rental Script SQL Injection Vulnerability
No description provided by source. ::::::::::::::::::::::::: Exploit Title : vacation Rental Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...
Zenphoto CMS 1.3 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: Zenphoto CMS 1.3 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Wed 14 Jul 2010 12:48:56 PM EEST Vendor: http://www.zenphoto.org/ Download: http://zenphoto.googlecode.com/files/zenphoto-1.3.tar.gz --- -= CSRF PoC 1 - Change Admin...
Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities
No description provided by source. Name: Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Sat 10 Jul 2010 08:05:44 PM EEST Vendor: http://elitecms.net/ Download: http://elitecms.net/download.php?download=eliteCMS -= CSRF PoC 1 - Change Admin Password =- html...
LionWiki 3.x - (index.php) Shell Upload Vulnerability
No description provided by source. Exploit Title: LionWiki 3.X index.php upload shell Date: monday 05 april 2010 Author: ayastar Software Link: http://lionwiki.0o.cz Version: 3.X Tested on: ubuntu 9.10 english CVE : yes Code : exploit code hi brother's and all muslims this is my first bug : dork ...
QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability
No description provided by source. author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password:...