2796 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin password via 1 a certain HTML form that is posted automatically by JavaScript or 2 a news post...
CVE-2007-3331
Cross-site request forgery CSRF vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin password via 1 a certain HTML form that is posted automatically by JavaScript or 2 a news post...
CVE-2007-3331
CVE-2007-3331 describes a cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 . The issue allows remote attackers to change the admin password through either (a) a specific HTML form auto-posted by JavaScript or (b) a crafted news post. The provided sources reiterate that CS...
[Full-disclosure] H4CREW-000005 EasyNews Pro 4.0 XSS & CSRF
I luv u Ms. Phisher u d4 d1am0nds 1n My Ski h4xorCrew Advirosy 5: Easynews PRO 4.0 XSS and CRSF =================================================== "the game of secuirity is like a sord fight you must think furst b4 you m0ve" H-4 h3r3 2 stay cuz we in da h0uz h4xorcewz n da house and r4w we g0nna...
pnphpbb2-sql.txt
C:\usr\php\php.exe c:\php.php Content-type: text/html X-Powered-By: PHP/4.3.9 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Usage: php c:\php.php host path OPTIONS host: target server ip/hostname path: PNphpBB2 path Options: -pport: specify a port other than 80...
vizayn-sql.txt
/ Vizayn Urun Tanitim Sistemi v0.2 tr Remote SQL Injection Vulnerability Author : BAHADIR Contact: [email protected] Scripr HomePage: http://www.vizayn.web.tr/ws.asp?ws=102 Script Demo URL: http://ws.vizaynhosting.com/V02/ Price : 55YTL PoF Concept:...
tsp-admin.txt
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Host Path ID password Host: target server ip/hostname Path: path of template ID: A Valid Admin ID usally 1 works for the 'admin' nickname password: The PWD you want ...
Alstrasoft Template Seller Pro 3.25 - Admin Password Change
Alstrasoft Template Seller Pro 3.25 - Admin Password Change !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Host Path ID password Host: target server ip/hostname Path: path of template ID: A Valid Admin ID usally ...
AlstraSoft Template Seller Pro <= 3.25 Admin Password Change Exploit
Exploit for unknown platform in category web applications ==================================================================== AlstraSoft Template Seller Pro = 3.25 Admin Password Change Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=...
eSyndiCat Input Validation Error Vulnerability
eSyndiCat is Directory websystem, a product of eSyndiCat.com It has security hole allow attackers get admin and more and more. Infected version: eSyndiCat Pro v1.x Infected file: manage-admins.php Use poc file to attack: ------------------------------------------------ pDiscovered by H2P - A memb...
psipuss 1.0 (editusers.php) Remote Change Admin Password Exploit
No description provided by source. ?php / '/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | &n...
Pre News Manager 1.0 - SQL Injection
Pre News Manager 1.0 - SQL Injection ============================================== Pre News Manager v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Script site: http://www.preproject.com/news.asp...
Pre News Manager 1.0 - SQL Injection
============================================== Pre News Manager v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Script site: http://www.preproject.com/news.asp...
psipuss 1.0 (editusers.php) Remote Change Admin Password Exploit
Exploit for unknown platform in category web applications ================================================================ psipuss 1.0 editusers.php Remote Change Admin Password Exploit ================================================================ ?php / '/ -.-...
psipuss 1.0 - 'editusers.php' Remote Change Admin Password
?php / '/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : psipuss version 1.0 ! Vendor : http://www.psi-labs.com/photosimagesuploadscript.html ! Author :...
Picture-Engine 1.2.0 - 'wall.php?cat' SQL Injection
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3.\d1,3:\d1,5\b'; function...
Guesbara 1.2 - Administrator Password Change
source: https://www.securityfocus.com/bid/23029/info Guesbara is prone to a vulnerability that may permit attackers to change the administrative password. Exploiting this issue may allow an attacker to gain administrative access to the affected application. Successful exploits will result in a...
Guesbara 1.2 - Administrator Password Change
Guesbara 1.2 - Administrator Password Change source: https://www.securityfocus.com/bid/23029/info Guesbara is prone to a vulnerability that may permit attackers to change the administrative password. Exploiting this issue may allow an attacker to gain administrative access to the affected...
Php-Stats <= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b PC-REMOTE-ADDR sql injection / cleat text admin pass disclosure by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...
PHP-Stats 0.1.9.1b - 'PC-REMOTE-ADDR' SQL Injection
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3.\d1,3:\d1,5\b'; function...