Quick.CMS 3.0 - Cross-Site Request Forgery

Quick.CMS 3.0 - Cross-Site Request Forgery + Exploit Title: Quick CMS v3.0 Cross Site Request Forgery Add Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"Quick.Cms v3.0" inurl:admin.php + Demo CMS Link: http://opensolution.org/Quick.Cms...

Quick.CMS 3.0 - Cross-Site Request Forgery

Exploit Title: Quick CMS v3.0 Cross Site Request Forgery Add Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"Quick.Cms v3.0" inurl:admin.php + Demo CMS Link: http://opensolution.org/Quick.Cms 1 1 0 I'm ^Xecuti0n3r member from Inj3ct0r...

Quick CMS 3.0 Cross Site Request Forgery

================================ + Exploit Title: Quick CMS v3.0 Cross Site Request Forgery Add Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"Quick.Cms v3.0" inurl:admin.php + Demo CMS Link:...

SocialCMS1.0.2 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- input type="hidden" name="TRconfigurationvalue" value="HA...

SocialCMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

SocialCMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- input type="hidden" name="configurationdescription" val...

Social CMS 1.0.2 Cross Site Request Forgery

Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- input type="hidden" name="INconfigurat...

Joomla! com_virtuemart <= v1.1.7 Blind SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/python Joomla! comvirtuemart 46 million results Patch: http://dev.virtuemart.net/attachments/202/Patch-VirtueMart-1.1.7a.zip References: - http://www.stratsec.net/Research/Advisories/VirtueMart-SQL-Injection-SS-2011-003 -...

Joomla! Component com_virtuemart 1.1.7 - Blind SQL Injection

!/usr/bin/python Joomla! comvirtuemart 46 million results Patch: http://dev.virtuemart.net/attachments/202/Patch-VirtueMart-1.1.7a.zip References: - http://www.stratsec.net/Research/Advisories/VirtueMart-SQL-Injection-SS-2011-003 -...

[SECURITY] CVE-2011-0013 Apache Tomcat Manager XSS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2011-0013 Apache Tomcat Manager XSS vulnerability Severity: Low Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.5 - - Tomcat 6.0.0 to 6.0.29 - - Tomcat 5.5.0 to 5.5.31 - - Earlier, unsupported versions may also be...

&#39;Free Simple Software&#39; SQL Injection Vulnerability &#40;CVE-2010-4298&#41;

'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION SELECT' to easily expose the application...

IBM OmniFind CSRF Vulnerability

Exploit for multiple platform in category web applications =============================== IBM OmniFind CSRF Vulnerability =============================== The forms in the administrator interface are not protected against XSRF. The attacker can do any action in the context of the victim. An examp...

IBM OmniFind - Cross-Site Request Forgery

The forms in the administrator interface are not protected against XSRF. The attacker can do any action in the context of the victim. An example attack scenario could be: The attacker creates a malicious website with a prepared form to add a new user, which will be submitted on load. Exploit to a...

IBM OmniFind - Cross-Site Request Forgery

IBM OmniFind - Cross-Site Request Forgery The forms in the administrator interface are not protected against XSRF. The attacker can do any action in the context of the victim. An example attack scenario could be: The attacker creates a malicious website with a prepared form to add a new user, whi...

OrbisCMS-1.0.2 Add Admin User CSRF

Exploit for php platform in category web applications ================================== OrbisCMS-1.0.2 CSRF Add Admin User ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

LightNEasy CMS 3.2.1 - Blind SQL Injection

Exploit Title: LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability Date: 20.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website: http://www.lightneasy.org/ Software Link: http://www.lightneasy.org/addons/downloads/send.php?dlid=127 Version: 3.2.1 Special Thanks to: Dominik...

vBulletin 3.8.43.8.5 - Registration Bypass

vBulletin 3.8.43.8.5 - Registration Bypass =============================================================== vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability =============================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1...

Zomplog CMS 3.9 Cross Site Request Forgery / Cross Site Scripting

Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download: http://www.zomp.nl/zomplog/downloads/zomplog/zomplog3.9.zip --- -= CSRF PoC 1 - Change Admin Password =- Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create Admin User...

Zomplog 3.9 - Cross-Site Scripting Cross-Site Request Forgery

Zomplog 3.9 - Cross-Site Scripting Cross-Site Request Forgery Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download: http://www.zomp.nl/zomplog/downloads/zomplog/zomplog3.9.zip --- -= CSRF PoC 1 - Change Admin Password =- Zomplog CMS 3.9 Multiple XSS/CSRF...

Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities

Exploit for php platform in category web applications ================================================= Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities ================================================= Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download:...

ZenPhoto CMS 1.3 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Wed 14 Jul 2010 12:48:56 PM EEST Vendor: http://www.zenphoto.org/ Download: http://zenphoto.googlecode.com/files/zenphoto-1.3.tar.gz --- -= CSRF PoC 1 - Change Admin Password =- Zenphoto CMS 1.3 Multiple CSRF Vulnerabilities - Change Admin Password input type="hidden" name="0-OPTIONSRIGHT...