Uploadscript 1.0 - Multiple Vulnerabilities

Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| |...

Uploadscript 1.0 - Multiple Vulnerabilities

Uploadscript 1.0 - Multiple Vulnerabilities Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code :...

Frog v0.9.5 CSRF Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------- Title: Frog = 0.9.5 XSRF Vulnerability Change Admin Password Author: Milos Zivanovic Email: [email protected]:[email protected] Date: 13...

Uploadscript v1.0. Multiple Vulnerabilities

No description provided by source. Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ /...

XAMPP 1.7.2 - Change Administrative Password

Title: XAMPP 1.7.2 Change Administrative Password Date: 11/12/2009 Author: bi0 Software Link: http://www.apachefriends.org/en/xampp-windows.html Version: 1.7.2 Tested on: Windows XP / Windows Vista CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // //...

Telepark Wiki v2.4.23 Multiple Remote Vulnerabilities

No description provided by source. Abysssec Inc Public Advisory Title : Telepark Wiki Multiple Remote Vulnerabilities Affected Version : = v2.4.23 Vendor Site : www.teamtodo.com Discovery : www.Abysssec.com Vendor contact : 8 november Vendor response : 9 november patch is available in vendor...

Telepark Wiki v2.4.23 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Telepark Wiki v2.4.23 Multiple Remote Vulnerabilities ===================================================== Title : Telepark Wiki Multiple Remote Vulnerabilities Affected Version :...

Apache Tomcat Manager Authenticated Upload Code Execution

This module can be used to execute a payload on Apache Tomcat servers that have an exposed "manager" application. The payload is uploaded as a WAR archive containing a jsp application using a POST request against the /manager/html/upload component. NOTE: The compatible payload sets vary based on...

Portili Personal And Team Wiki Disclosure / XSS / Execution

Abysssec Inc Public Advisory Title : Portili Personal and Team Wiki Multiple Remote Vulnerabilities Affected Version : Portili Personal and Team Wik = 1.14 Vendor Site : www.Portili.com Discovery : www.Abysssec.com Vendor Contact : 10/4/2009 Vendor Response : 11/4/2009 Vendor Response : i have...

Portili Personal and Team Wiki 1.14 - Multiple Vulnerabilities (1)

Portili Personal and Team Wiki 1.14 - Multiple Vulnerabilities 1 Abysssec Inc Public Advisory Title : Portili Personal and Team Wiki Multiple Remote Vulnerabilities Affected Version : Portili Personal and Team Wik = 1.14 Vendor Site : www.Portili.com Discovery : www.Abysssec.com Vendor Contact :...

Portili Personal and Team Wiki 1.14 - Multiple Vulnerabilities (1)

Abysssec Inc Public Advisory Title : Portili Personal and Team Wiki Multiple Remote Vulnerabilities Affected Version : Portili Personal and Team Wik = 1.14 Vendor Site : www.Portili.com Discovery : www.Abysssec.com Vendor Contact : 10/4/2009 Vendor Response : 11/4/2009 Vendor Response : i have...

3Com OfficeConnect Firewall/Router multiple remote Vulnerabilities

Product: 3Com OfficeConnect Firewall/Router Website: http://www.3com.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: remote command execution and password disclosure Admin password disclosure 1 SSH/Telnet to router using one of these hidde...

Portili Personal and Team Wiki <=1.14 Multiple Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Portili Personal and Team Wiki = 1.14 Multiple Vulnerabilities =============================================================== Abysssec Inc Public Advisory Title : Portili...

Rongsoft Oday bulk to get SHELL-vulnerability warning-the black bar safety net

Author: cast Blog:http://hi. baidu. com/castblog/ Then GOOGLE search for keyword: inurl:xinwenxq. asp? biaohao= Access management address: gonggong/denglu/denglu. asp First, in the management of the landing page, with a simple'or'='or'can fool the past! In the verification file:...

CVE-2007-6730

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that 1 enable remote router management via goform/formRmtMgt or 2 modify the administrator passwor...

CMSphp 0.21 Cross Site Request Forgery

Author: REMOVED AT REQUEST OF AUTHOR CMS: CMSphp 0.21 Type of vulnerability: Cross site request forgery You can download following cms on : http://webscripts.softpedia.com/script/Content-Management/CMSphp-37567.html CMSphp 0.21 suffers from Cross site request forgery which allows malicious attack...

ITechBids 8.0 Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " ITechBids v8.0 Blind SQL Injection Exploit \n"; print " \n"; print " itechd.php productid \n"; print " http://itechbids.com/...

Serv-U FTP Server v8 local mention right-vulnerability warning-the black bar safety net

Author: the emptiness of the prodigal son heart Release date:2009-08-05 Updated date:2009-08-05 Affected systems: serv-u8 Not affected system: Other versions are not affected Description: See cnbeta found su 8 This version. Think before write a 7 local mention right. Don't know 8 what the securit...

ZenPhoto Gallery 1.2.5 Admin Password Reset (CRSF)

No description provided by source. ?php Zen Photo Adminstrator Password Steal/Reset Exploit +================================================================+ Discovered and coded by petros at dusecurity.com +----------------------------------------------------------------+ Affects: ZenPhoto...

ZenPhoto Gallery 1.2.5 - Admin Password Reset (Cross-Site Request Forgery)

ZenPhoto Gallery 1.2.5 - Admin Password Reset Cross-Site Request Forgery ?php Zen Photo Adminstrator Password Steal/Reset Exploit +================================================================+ Discovered and coded by petros at dusecurity.com...