Event Ticket PORTAL <= Admin Password Change (CSRF) Exploit

Exploit for php platform in category web applications =========================================================== Event Ticket PORTAL Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'...

Travel Portal Script - Cross-Site Request Forgery (Admin Password Change)

Travel Portal Script - Cross-Site Request Forgery Admin Password Change ===================================================== Travel PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Exploited by KnocKout Travel Portal - Remote Admin Password Change CSRF Exploited by KnocKout...

Event Ticket Portal Script Admin Password Change - Cross-Site Request Forgery

=========================================================== Event Ticket PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Event Ticket PORTAL - Admin Password Chage CSRF Exploited by KnocKout Username: New Password: /table...

Travel Portal Script - Cross-Site Request Forgery (Admin Password Change)

===================================================== Travel PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Exploited by KnocKout Travel Portal - Remote Admin Password Change CSRF Exploited by KnocKout Admin Name:admin New Password: input type="submit" name="...

Rapid7 Security Advisory 37

R7-0037: SAP BusinessObjects Axis2 Default Admin Password October 13th, 2010 Description: The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone with access to the Axis2 port...

SAP BusinessObjects Axis2 Default Admin Password

Overview The Axis2 component of SAP BusinessObjects contains a default administrator account and password. Description The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone...

Webspell 4.2.1 search-injection vulnerability and fix-vulnerability warning-the black bar safety net

Webspell 4.2.1 procedures exist to search-typeSQL injectioncould obtain the administrator user password Search injected into the page: http://localhost/webspell/asearch.php?site=search&table=user&column=nickname&exact=true&identifier=userID&searchtemp=searchuser&search= Storm the Admin Password...

Tiki Wiki CMS Groupware 5.2 Cross Site Request Forgery

...

CMSimple XSRF Vulnerability

Exploit for php platform in category web applications =========================== CMSimple XSRF Vulnerability =========================== - Title : CMSimple XSRF Vulnerability - Affected Version :CMSimple $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2...

Month Of Abysssec Undisclosed Bugs - CMSimple 3.2

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2 = $GLOBALS$k1.''.$k2; $GLOBALS$a$k1$k2 = stsl$GLOBALS$a$k1$k2; if $k1.$k2 == 'editorbuttons'$text .=...

CMSimple - Cross-Site Request Forgery

CMSimple - Cross-Site Request Forgery ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2 = $GLOBALS$k1.''.$k2; $GLOBALS$a$k1$k2 = stsl$GLOBALS$a$k1$k2; if $k1.$k2 ==...

CMSimple - Cross-Site Request Forgery

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2 = $GLOBALS$k1.''.$k2; $GLOBALS$a$k1$k2 = stsl$GLOBALS$a$k1$k2; if $k1.$k2 == 'editorbuttons'$text .=...

pixelpost v1.7.3 CSRF change admin password

Exploit for php platform in category web applications =========================================== pixelpost v1.7.3 CSRF change admin password =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

PixelPost 1.7.3 Cross Site Request Forgery / Cross Site Scripting

1 +Exploit Title: pixelpostv1.7.3 Multiple vulnerabilities 0 0 +Date: 15/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://www.pixelpost.org/ 0 0 +Download: http://www.pixelpost.org/ 1 1 +Version: 1.7.3 0 0 +Tested on: WinXp sp3 1 1 +Risk :Hight 0 0...

PixelPost 1.7.3 - Multiple Vulnerabilities

1 +Exploit Title: pixelpostv1.7.3 Multiple vulnerabilities 0 0 +Date: 15/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://www.pixelpost.org/ 0 0 +Download: http://www.pixelpost.org/ 1 1 +Version: 1.7.3 0 0 +Tested on: WinXp sp3 1 1 +Risk :Hight 0 0...

piwigo-2.1.2 - Multiple Vulnerabilities

piwigo-2.1.2 - Multiple Vulnerabilities --=Sql injection=-- http://www.target.com/path/[email protected]&author=sweet&cat=1SQLi&since=1&sortby=date&sortorder=DESC&itemsnumber=5 http://www.target.com/path/picture.php?1sweetSQLi&action=rate=0...

piwigo 2.1.2 Multiple vulnerabilities

Exploit for php platform in category web applications ===================================== piwigo 2.1.2 Multiple vulnerabilities ===================================== --=Sql injection=--...

piwigo-2.1.2 - Multiple Vulnerabilities

--=Sql injection=-- http://www.target.com/path/[email protected]&author=sweet&cat=1SQLi&since=1&sortby=date&sortorder=DESC&itemsnumber=5 http://www.target.com/path/picture.php?1sweetSQLi&action=rate=0 http://www.target.com/path/index.php?/search/10SQli --=Stored Xss=-- Admi...

Month Of Abysssec Undisclosed Bugs - DynPage 1.0

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-7-dynpage-multiple-remote-vulnerabilities/ ''' - Title : DynPage Multiple Remote Vulnerabilities. - Affected Version : = v1.0 - Vendor Site :...

DynPage <= v1.0 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications =============================================== DynPage = v1.0 Multiple Remote Vulnerabilities =============================================== - Title : DynPage Multiple Remote Vulnerabilities. - Affected Version : = v1.0 - Vendor Site :...