Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities

Exploit for php platform in category web applications ================================================= Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities ================================================= Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download:...

Macs CMS 1.1.4 Cross Site Request Forgery / Cross Site Scripting

Date: Sun 11 Jul 2010 11:53:35 AM EEST Vendor: http://macs-framework.sourceforge.net/ Download: http://sourceforge.net/projects/macs-framework/ --- -= CSRF PoC 1 - Create Admin User =- Macs CMS 1.1.4 Multiple Vulnerabilities XSS/CSRF - Create Admin User -= CSRF PoC 2 - Delete User =- -= XSS PoC =...

chillyCMS 1.1.3 Cross Site Request Forgery

input type="hidden...

TomatoCart 1.0.1 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================== TomatoCart 1.0.1 Multiple CSRF Vulnerabilities ============================================== Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download:...

Family Connection 1.8.1 Multiple Remote Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta + Application: Family Connection + Version: 1.8.1 + Website: http://www.familycms.com + Bugs: A Multiple SQL Injection B Create Admin User C Blind SQL Injection + Exploitation: Remote + Date: 25 Mar 2009 + Discovered by: Salvatore...

RoomPHPlanning <= 1.6 (userform.php) Create Admin User Exploit

No description provided by source. !/usr/bin/perl -w use LWP::UserAgent; use HTML::Form; print "\n"; print "+=RoomPHPlanning\n"; print "+=v1.x\n"; print "+=Vul: Remote Create user with all permissions admin\n"; print "+=Author: Jonathan Salwan \n"; print "+=Web: http://www.shell-storm.org\n"; pri...

Multiple vulnerabilities in FreeStyleWiki including cross-site scripting

Overview FreeStyleWiki contains a cross-site scripting and a cross-site request forgery vulnerabilities. The cross-site scripting vulnerability could allow a remote attacker to create a web page containing a malicious script. The cross-site request forgery vulnerability could allow a remote...

CVE-2006-6773

pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by setting the isadmin HTTP POST parameter to 1...

CVE-2006-6773

CVE-2006-6773 affects Fishyshoop 0.930 beta, where pages/register/register.php allows remote attackers to create arbitrary administrative users by sending is_admin=1 via HTTP POST. The vulnerability enables elevation of privileges (admin account creation) through a parameter-based bypass in the r...