Frog CMS 0.9.5 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Sun 11 Jul 2010 10:22:48 AM EEST Vendor: http://www.madebyfrog.com/ Download: http://www.madebyfrog.com/public/download/files/frog095.tar.gz --- -= CSRF PoC 1 - Create Admin User =- Frog CMS 0.9.5 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF PoC 2 - Delete User =- -= CSRF PoC 3...

Frog CMS 0.9.5 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================ Frog CMS 0.9.5 Multiple CSRF Vulnerabilities ============================================ Date: Sun 11 Jul 2010 10:22:48 AM EEST Vendor: http://www.madebyfrog.com/ Download:...

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Sun 11 Jul 2010 08:08:10 PM EEST Vendor: http://www.novo-ws.com/orbis-cms/ Download: http://www.ohloh.net/p/orbis-cms/download?filename=orbis-1.0.2.zip --- -= CSRF PoC 1 - Change Admin Password =- Orbis CMS 1.0.2 Multiple...

TomatoCart 1.0.1 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================== TomatoCart 1.0.1 Multiple CSRF Vulnerabilities ============================================== Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download:...

Orbis CMS v1.0.2 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================== Orbis CMS v1.0.2 Multiple CSRF Vulnerabilities ============================================== Date: Sun 11 Jul 2010 08:08:10 PM EEST Vendor: http://www.novo-ws.com/orbis-cms/ Download:...

TomatoCart 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download: http://www.tomatocart.com/component/extensionmanage/?task=downloadfiles&file=tomatocart-1.0.1.zip --- -= CSRF PoC 1 - Create Admin User =- TomatoCart 1.0.1 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF...

Elite CMS 1.01 - Multiple Cross-Site Scripting Cross-Site Request Forgery Vulnerabilities

Elite CMS 1.01 - Multiple Cross-Site Scripting Cross-Site Request Forgery Vulnerabilities Name: Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities Author: 10n1z3d Date: Sat 10 Jul 2010 08:05:44 PM EEST Vendor: http://elitecms.net/ Download: http://elitecms.net/download.php?download=eliteCMS -= CSRF...

PageDirector CMS injection vulnerability and CSRF attacks-vulnerability warning-the black bar safety net

PageDirector the CMS program there is a SQL injection vulnerability and remote add admin user bug. SQL injection ,注入 页面 index.php: -- CSRF add admin user Backstage siteadmin/adduser. php is not verified, you can remotely add an administrator user. POC: the...

Prediction League 0.3.8 Cross Site Request Forgery

======================================================================================== | Title : Prediction League 0.3.8 CSRF Create Admin User Exploit | Author : indoushka | Home : www.iqs3cur1ty.com/vb | Tested on: Lunix Français v.9.4 Ubuntu | Bug : CSRF Create Admin User Exploit...

Prediction League 0.3.8 CSRF Create Admin User Exploit

Exploit for php platform in category web applications ====================================================== Prediction League 0.3.8 CSRF Create Admin User Exploit ======================================================...

Prediction League 0.3.8 - Cross-Site Request Forgery (Add Admin)

Prediction League 0.3.8 - Cross-Site Request Forgery Add Admin ======================================================================================== | Title : Prediction League 0.3.8 CSRF Create Admin User Exploit | Author : indoushka | Home : www.iqs3cur1ty.com/vb | Tested on: Lunix Français...

Prediction League 0.3.8 - Cross-Site Request Forgery (Add Admin)

======================================================================================== | Title : Prediction League 0.3.8 CSRF Create Admin User Exploit | Author : indoushka | Home : www.iqs3cur1ty.com/vb | Tested on: Lunix Français v.9.4 Ubuntu | Bug : CSRF Create Admin User Exploit...

CMS Made Simple 1.7 Cross Site Request Forgery

======================================================================= CMS Made Simple 1.7 CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal...

OneCMS 2.6 Cross Site Request Forgery

Topic : OneCMSv2.6 2010-03-25 Bug type : remote add admin user exploit Download : http://sourceforge.net/projects/onecms/files/onecms/v2.6/OneCMSv2.6.zip/download =========================================================================== Author : ItSecTeam Email : [email protected] Website:...

AdaptCMS Lite 1.5 Cross Site Request Forgery

=========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download : http://sourceforge.net/projects/adaptcms/files/AdaptCMS%20Lite%20v1/1.5/AdaptCMSLite1.5.zip/download Advisory ...

NinkoBB 1.3RC4 Cross Site Request Forgery

change admin user,passwd & add new admin user exploit Author: ItSecTeam download from:http://ninkobb.com/releases/?NinkoBB-1.3RC4.zip script:NinkoBB 1.3RC4 update:2010 ----------------------------------------- xpl: coded by ahmadbady Admin Control Panel - Editing User Username Settings banned...

Anantasoft Gazelle CMS CSRF Vulnerability

Exploit for unknown platform in category web applications ========================================= Anantasoft Gazelle CMS CSRF Vulnerability ========================================= Software AnantasoftGazelleCMS Category CMS / Portals Plateform php Proof of concept Targeted URL:...

Croogo 1.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities

----------------------------------------------------------------------------------------------- Title: Croogo 1.2.1 Multiple CSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmaildotcom Date: 07. February 2010...

MS Internet Explorer wshom.ocx (Run) ActiveX Remote Code Execution

Exploit for unknown platform in category remote exploits ==================================================================================== MS Internet Explorer wshom.ocx Run ActiveX Remote Code Execution add admin user...

DS CMS 1.0 - NewsId SQL Injection

DS CMS 1.0 - NewsId SQL Injection Script : DS CMS 1.0 NewsId Remote SQL Injection Vulnerability Script site : http://cms.dsinternal.com/Home AUTHOR : Palyo34 HOME : http://www.1923turk.biz ======================================================= +++++++++++++++++++++++ Exploit...