ezCourses Remote Permission Bypass

,-.-. | | | | | o ,---. o | o | | |,---.,---.|---.,---.,---.|---. |---|,---.,---.|/ .,---.,---. |---|,---.,---.,---.,---..,---.|--- .,---.,---. | | |,---|| || || |---'| | | |,---|| | \ || || | | |---.---.| || |,---|| || || | ' '---^---| ' ---'---'o '---^---' '---|o '---'---'---'---'---^---'---' '...

FOX Sports website database hacked and leaked by Shad0w

FOX Sports website database hacked and leaked by Shad0w One of the Biggest Fox Sports website with world rank 678 and millions of Readers/Day got hacked. Hacker named "Shad0w " release SQL injection Vulnerability on one of the sub domain of Fox Sports and exploit it to extract the database. Leake...

FOX Sports website database hacked and leaked by Shad0w

FOX Sports website database hacked and leaked by Shad0w One of the Biggest Fox Sports website with world rank 678 and millions of Readers/Day got hacked. Hacker named "Shad0w" release SQL injection Vulnerability on one of the sub domain of Fox Sports and exploit it to extract the database. Leaked...

Mambo 4.6.5 Cross Site Request Forgery

===================================================================== . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Exploit Information Disclosure Web : exploit-id.com e-mail : rootatexploit-iddotcom I'm Caddy-Dz,...

Mambo 4.6.5 CSRF Vuln (Change Admin Password)

Exploit for php platform in category web applications ===================================================================== . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Exploit Information Disclosure Web :...

oscommerce online merchant v2.2 rc2 - [CSRF] Change admin and pass

Exploit for php platform in category web applications Exploit Title: oscommerce online merchant v2.2 rc2 - CSRF Change name admin and pass Author: Dmar al3noOoz Mail : email protected Name : oscommerce online merchant v2.2 rc2 dork : Google Dork: "oscommerce online merchant v2.2 rc2" Software Lin...

videoDB 3.1.0 SQL Injection

DORK:allinurl:borrow.php?diskid= DORK:allintitle:videodb Vendor: http://www.videodb.net/blog/ $ ----------- | S3C0VERUN | & ------------@ along with this i was able in some sites to determine that you can overwrite the databse contents and also if you look in the source you se there password the...

DEDECMS free account password directly into the background-bug warning-the black bar safety net

As is well known, due to the use of simple, customer base, and more, weaving dreams CMS has been broke manyvulnerabilities. Today xiaobian in the group to get the woven dream official forum, a moderator and reliable message:“DEDECMS explosion serious securityvulnerability, the recent official wil...

WD TV Live Hub Compromised - Multiple Vulnerabilities Found By Dr. Alberto Fontanella

WD TV Live Hub Compromised - Multiple Vulnerabilities Found By Dr. Alberto Fontanella Dr. Alberto Fontanella found on Western Digital WD TV Live Hub appliance with the last firmware installed 2.06.10 and 3 exploits to get admin password, deface appliance and get root shell: Author: Dr. Alberto...

2Wire Password Reset

require 'msf/core' class Metasploit3 '2Wire Password Reset', 'Version' = '$Revision: 1 $', 'Description' = %Q This module will reset the admin password on a 2wire wireless router. This works by using a setup wizard page that fails to check if a user is authenicated and doesn't remove or block aft...

WeBid 1.0.2 Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Job Board Software<= XSRF/CSRF (Change Admin Password)

Exploit for php platform in category web applications ===================================================================== . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Exploit Information Disclosure Web :...

ApPHP Shopping Cart <= XSRF (Change Admin Password)

Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...

Belkin F5D7234-4 v5 G Wireless Router - Remote Hash Exposed

+-----------------------------------------+ | Belkin G Wireless Router Admin Exploit. | +-----------------------------------------+ Firmware Version : 5.00.12 Sep 10 2009 19:54:12 Boot Version : 1.18 Hardware : F5D7234-4 v5 01 Author : Aodrulez. Email : [email protected] Twitter :...

eFront Community++ <= XSRF (Add admin/change admin passwd)

Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...

Textpattern 4.3.0 Cross Site Request Forgery

Exploit Title: Textpattern 4.3.0 CMS XSRF Vulnerability Change Admin's Password + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Demo Link : http://www.cmsagora.com/demo.php?id=94&type=2 + Demo...

Wind noise 4. 0 registered page exploit-vulnerability warning-the black bar safety net

Keywords: inurl:User/Regservice. asp The wind noise the registration page... Vulnerability page:/user/SetNextOptions. asp Use method: Constructor injection user/SetNextOptions. asp? sType=1&EquValue=aaaa&SelectName=aaa&ReqSql=select+1,adminname,3,4,5,6,7,8++from+FSMFAdmin “adminname” admin user...

Textpattern 4.3.0 CMS XSRF Vulnerability (Change Admin's Password)

Exploit for php platform in category web applications + Exploit Title: Textpattern 4.3.0 CMS XSRF Vulnerability Change Admin's Password + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Demo Link : http://www.cmsagora.com/demo.php?id=94&type=2 + Demo...

NucleusCMS 3.64 Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

ImmoPHP v1.1.1 Remote (CSRF) Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...