Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 admin/accounts/, 2 admin/manage/, or 3 admin/manage/blocks/edit/; or 4 group parameter to admin/configuration/. NOTE: The...

CVE-2012-5005

Cross-site request forgery CSRF vulnerability in admin/adminoptions.php in VR GPub 4.0 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an add action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/adminoptions.php in VR GPub 4.0 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an add action...

CVE-2012-5005

Cross-site request forgery CSRF vulnerability in admin/adminoptions.php in VR GPub 4.0 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an add action...

CVE-2012-2996

CVE-2012-2996 affects Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394. The vulnerability is a Cross-Site Request Forgery (CSRF) in saveAccountSubTab.imss that enables exploitation via a saveAuth action to hijack administrator authentication and create new admin accounts. Root ...

CVE-2012-2996

Cross-site request forgery CSRF vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Suite 7.1-BuildWin321394 allows remote attackers to hijack the authentication of administrators for requests that create admin accounts via a saveAuth action...

CVE-2012-2626

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action...

Authentication flaw

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action...

CVE-2012-0303

Multiple cross-site request forgery CSRF vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 execute application commands or 2 create admin accounts...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 execute application commands or 2 create admin accounts...

Koprana CMS SQL Injection

http://www.mediafire.com/?ij9rfpfw6s7uzxf for windows only / load exploits/webapp/omiworldinjection.php set HOST target set MODE 1 for admin accounts/2 for all accounts set FILE save format TXT/SQL exploit !KopranaInjection @ HOST = localhost = Target URL @ PORT = 80 = Target Port @ PATH = / = We...

CVE-2012-1058

Cross-site request forgery CSRF vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php...

CVE-2012-1058

Cross-site request forgery CSRF vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php...

National Assembly of Pakistan database hacked by V0iD

National Assembly of Pakistan database hacked by V0iD Another new hacker "V0iD" come in action ! He hack the website and database of National Assembly of Pakistan at https://www.na.gov.pk . The hacked database info is leaked at https://pastebin.com/bAgnnG9F . Hacker leaks the username / passwords...

National Assembly of Pakistan database hacked by V0iD

National Assembly of Pakistan database hacked by V0iD Another new hacker "V0iD" come in action ! He hack the website and database of National Assembly of Pakistan at https://www.na.gov.pk . The hacked database info is leaked at . Hacker leaks the username / passwords of 7 admin accounts and phone...

Concave Yaya news publishing system ACC version SQL Edition latest through the kill injection 0day-vulnerability warning-the black bar safety net

Use code: javascript:alertdocument. cookie="BigClassName="+escape"%2 5' and 1=2 union select 1,admin,3,password,5,6,7,8,9,1 0,1 1,1 2,1 3 from admin where 1=1 and 'a'='a"; Open thepage, then in the first page of the IE address bar above the use of the code, and then access the? Page refresh time,...

CVE-2011-0277

Cross-site request forgery CSRF vulnerability in HP Power Manager HPPM 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...

Yamamah Photo Gallery 1.00 - calbums SQL Injection

Yamamah Photo Gallery 1.00 - calbums SQL Injection Yamamah Photo Gallery 1.00 SQL Injection Vulnerability Author : CoBRa21 Script Home : http://www.yamamah.org/ Dork : "Powered By : Yamamah Version 1.00" SQL Injection: http://localhost/path/?calbums=-2 union select...

CVE-2009-3949

cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote attackers to create administrative accounts via the name, password, and confpassword parameters...