2950 matches found
phpyun多漏洞组合写shell(有条件限制)
简要描述： phpyun多漏洞组合写shell有条件限制 详细说明： 1. Phpyun的后台基本都有token。 之所以说基本，是因为还漏掉了一个关键的地方。 Phpyun的管理员帐号密码都在phpyunadminuser表中。 用上面的方法进行备份，是没有token的 限制条件 http://wooyun.org/bugs/wooyun-2014-064004 感谢u神 然后如下。 2. 好的，再来说如果实现上面这个get的问题。 我们注册一个企业用户。 然后在添加一个表情，然后修改图片属性，地址。...
Food Order Portal - admin_user_delete.php Cross-Site Request Forgery
Food Order Portal - adminuserdelete.php Cross-Site Request Forgery source: https://www.securityfocus.com/bid/69787/info Food Order Portal is prone to a cross-site request-forgery vulnerability. An attacker can exploit the cross-site request forgery issue to perform unauthorized actions in the...
WordPress custom-contact-forms Plugin SQL Upload
The WordPress custom-contact-forms plugin use auxiliary/admin/http/wp/customcontactforms msf undefinedcustomcontactforms show actions ...actions... msf undefinedcustomcontactforms set ACTION msf undefinedcustomcontactforms show options ...show and set options... msf undefinedcustomcontactforms ru...
win32 / windows 7 Add Admin User Shellcode - 194 bytes
Title: Add Admin User Shellcode 194 bytes - Any Windows Version Release date: 21/06/2014 Author: Giuseppe D'Amore http://it.linkedin.com/pub/giuseppe-d-amore/69/37/66b Size: 194 byte NULL free Tested on: Win8,Win7,WinVista,WinXP,Win2kPro,Win2k8,Win2k8R2,Win2k3 Username: BroK3n Password: BroK3n Ad...
IE wshom.ocx (Run) ActiveX Remote Code Execution (add admin user)
No description provided by source. Exploit Title: IE wshom.ocx Run ActiveX Remote Code Execution add admin user Date: 22/01/2010 Author: Stack Version: ALL Tested on: winsp2 html /font/b/p p object classid='clsid:72C24DD5-D70A-438B-8A42-98424B88AFB8' id='target' /object script language='vbscript'...
Campsite CMS 3.4.0 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: Campsite CMS 3.4.0 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Mon 12 Jul 2010 03:40:46 PM EEST Vendor: http://www.sourcefabric.org/en/home/web/6/Campsite.htm?tpl=18 Download:...
PHP-Nuke Error Manager Module 2.1 error.php Multiple Variables XSS
No description provided by source. source: http://www.securityfocus.com/bid/9911/info It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional conditions and simple design errors. These issu...
siteman 2.x (exec/lfi/xss) Multiple Vulnerabilities
No description provided by source. Siteman 2.X 0Day Multiple Remote Vulnerabilities CODE EXECUTION/LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de -...
UMI.CMS 2.9 - CSRF Vulnerability
No description provided by source. 添加一个管理员用户：csrfuser|||password document.main.submit;...
Zenphoto CMS 1.3 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: Zenphoto CMS 1.3 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Wed 14 Jul 2010 12:48:56 PM EEST Vendor: http://www.zenphoto.org/ Download: http://zenphoto.googlecode.com/files/zenphoto-1.3.tar.gz --- -= CSRF PoC 1 - Change Admin...
Limny 2.0 - Create Admin User CSRF Exploit
No description provided by source...
Orbis CMS 1.0.2 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: Orbis CMS 1.0.2 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Sun 11 Jul 2010 08:08:10 PM EEST Vendor: http://www.novo-ws.com/orbis-cms/ Download: http://www.ohloh.net/p/orbis-cms/download?filename=orbis-1.0.2.zip --- -= CSRF Po...
InverseFlow 2.4 - CSRF Vulnerabilities (Add Admin User)
No description provided by source. + Exploit Title: InverseFlow v2.4 CSRF Vulnerabilities Add Admin User + Version : 2.4 + Author : EjRaM HaCkEr + Contact : m2z9.cn + Dork : inurl:ticket.php?cmd=lost + Software Link : http://asria.info/download/script/inverseflow.zip...
SocialCMS1.0.2 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: socialcms1.0.2 Multiple CSRF Vulnerabilities Author: vir0e5 a.k.a banditc0de [email protected] Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- !-- Create Admin User -- body...
phpwcms <= 1.5.4.6 "preg_replace" - Multiple Vulnerabilities
No description provided by source. ?php / phpwcms = v1.5.4.6 pregreplace remote code execution exploit vendor: http://www.phpwcms.de/ Download: github.com/slackero/phpwcms by: aeon Well it appears there are multiple remote code execution bugs that exists in phpwcms for quite some time now. Here I...
Anantasoft Gazelle CMS CSRF Vulnerability
No description provided by source. ======================================================================= Anantasoft Gazelle CMS CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email...
AlstraSoft Forum Pay Per Post Exchange 2.0 - SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ Forum Pay Per Post SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...
Grafik CMS 1.1.2 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: Grafik CMS 1.1.2 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Mon 12 Jul 2010 07:07:22 PM EEST Vendor: http://www.grafik-power.com/grafikcms/ Download: None --- -= CSRF PoC 1 - Change Admin Password =- html head titleGrafik CMS...
boastMachine <= 3.1 (mail.php id) SQL Injection Vulnerability
No description provided by source. ...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hacke...