2752 matches found
recordpress 0.3.1 - Multiple Vulnerabilities
recordpress 0.3.1 - Multiple Vulnerabilities ---------------------------------------------------------------- WebApplication : RecordPress 0.3.1 Type of vunlnerability : CSRF Change Admin Password And XSS Risk of use : Medium ---------------------------------------------------------------- Produc...
recordpress 0.3.1 - Multiple Vulnerabilities
---------------------------------------------------------------- WebApplication : RecordPress 0.3.1 Type of vunlnerability : CSRF Change Admin Password And XSS Risk of use : Medium ---------------------------------------------------------------- Producer Website : http://www.recordpress.org/...
Ruubikcms 1.0.3 - Multiple Vulnerabilities
Ruubikcms 1.0.3 - Multiple Vulnerabilities ---------------------------------------------------------------- WebApplication : RuubikCMS Version 1.0.3 Type of vunlnerability : CSRF Change Admin Password And XSS Risk of use : Medium ----------------------------------------------------------------...
PBlogEX 1.2 Shell Upload
PBlogEX v1.2 Multiply Vulnerabilities vendor: http://www.twelvedev.com/ By l3lacklord WwW.Mokhareb.NeT Demo: http://f-ochoa.com/ Tested On: Apache/2.2.9 - PHP/5.2.6 Date: 2011/03/4 Des: The Admin Password Change Not Authoritated for execute POC: http://Site.com/PBlogEX/admin/admin.password.php...
Linksys Cisco Wag120N CSRF Vulnerability
---------------------------------------------------------------- Hardware : Linksys Cisco Wag120nAnd perhaps similar versions Type of vunlnerability : CSRF Change Admin Password And Add User Risk of use : High ---------------------------------------------------------------- Producer Website :...
Linksys Cisco WAG120N CSRF Vulnerability
Exploit for hardware platform in category web applications ---------------------------------------------------------------- Hardware : Linksys Cisco Wag120nAnd perhaps similar versions Type of vunlnerability : CSRF Change Admin Password And Add User Risk of use : High...
Cisco Linksys WAG120N - Cross-Site Request Forgery
---------------------------------------------------------------- Hardware : Linksys Cisco Wag120nAnd perhaps similar versions Type of vunlnerability : CSRF Change Admin Password And Add User Risk of use : High ---------------------------------------------------------------- Producer Website :...
Linksys Cisco Wag120n Cross Site Request Forgery
---------------------------------------------------------------- Hardware : Linksys Cisco Wag120nAnd perhaps similar versions Type of vunlnerability : CSRF Change Admin Password And Add User Risk of use : High ---------------------------------------------------------------- Producer Website :...
plesk virtual host Management Platform 0day-vulnerability warning-the black bar safety net
1,inhttp://xxxxxx.com:8880here, the default administrator account password is the admin Password stepu 2, in thehttps://xxxxx.com:8443 mssql version Account ' union select top 1 login+char1 2 4+passwd from adminaliases-- Error,broken account password After landing server - remote desktop account...
viart shop v4.0.5 CSRF Vulnerability
Exploit for php platform in category web applications +-------------------------------------------------------------------------+ Software : viart shop 4.0.5 Author : Or4nG.M4N Date : n/a Dork : inurl:"powered by viart shop 4.0.5" Software Link : http://www.viart.com/...
Viart Shop 4.0.5 Cross Site Request Forgery
+-------------------------------------------------------------------------+ Software : viart shop 4.0.5 Author : Or4nG.M4N Date : n/a Dork : inurl:"powered by viart shop 4.0.5" Software Link : http://www.viart.com/ +-------------------------------------------------------------------------+...
Contents-Mall vulnerability in password handling
Overview Contents-Mall contains a vulnerability in the way it handles passwords. Contents-Mall is a shopping cart software for digital contents. Contents-Mall contains a vulnerability in the way it handles passwords. Impact The administrative password may be disclosed. As a result, information...
PHP MicroCMS 1.0.1 CSRF and XSS Vulnerabilities
Exploit for php platform in category web applications Product: PHP MicroCMS Vendor: ApPHP http://www.apphp.com/ Vulnerable Version: 1.0.1 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vendor Alerted, Awaiti...
S40 CMS v.0.4.1 Change Admin Passwd CSRF Exploit
Exploit for php platform in category web applications In The Name Of GOD + Exploit Title:remote change user and password exploit + Date: 2010 + script:S40 CMS v.0.4.1 beta + Software: http://s40.biz/?p=download + Author : pentesters.ir +discovered by:ahmadbady + Contact : email protected + Websit...
S40 CMS 0.4.1 - Cross-Site Request Forgery (Change Admin Password)
S40 CMS 0.4.1 - Cross-Site Request Forgery Change Admin Password In The Name Of GOD + Exploit Title:remote change user and password exploit + Date: 2010 + script:S40 CMS v.0.4.1 beta + Software: http://s40.biz/?p=download + Author : pentesters.ir +discovered by:ahmadbady + Contact :...
S40 CMS 0.4.1 - Cross-Site Request Forgery (Change Admin Password)
In The Name Of GOD + Exploit Title:remote change user and password exploit + Date: 2010 + script:S40 CMS v.0.4.1 beta + Software: http://s40.biz/?p=download + Author : pentesters.ir +discovered by:ahmadbady + Contact : [email protected] + Website : WwW.PenTesters.IR expl: coded by ahmadbady...
Ignition 1.3 - Remote Code Execution
Ignition 1.3 - Remote Code Execution ?php / Ignition 1.3 Remote Code Execution Exploit by cOndemned download: http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz source of i-options.php 1. ?php 2. sessionstart; 3. if $POST'submit' 4. if $FH = @fopen'data/settings.php', 'w' 5...
Ignition 1.3 - Remote Code Execution
?php / Ignition 1.3 Remote Code Execution Exploit by cOndemned download: http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz source of i-options.php 1. ?php 2. sessionstart; 3. if $POST'submit' 4. if $FH = @fopen'data/settings.php', 'w' 5. @fwrite$FH, '?php $pass =...
Web@All 1.1 Remote Admin Settings Change Exploit
=========================================== Web@all Date: 27/12/2010 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- Application Info: web@all 1.1 web@all is a CMS which is not similar to general CMS, you can build it easyly by yourself...