PT-2012-5922

Name of the Vulnerable Software and Affected Versions Xavi X7968 affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that change the administrator password. This is achieved via t...

eFront enterprise <= XSRF (Add admin/change admin passwd)

Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...

eFront Educational <=XSRF (Add admin/change admin passwd)

Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...

CVE-2006-1412: Undefined Security Weakness

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd...