2520 matches found
Allomani - E-Store 1.0 - CSRF Add Admin Account
No description provided by source. Exploit Title: Allomani - E-Store v1.0 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://allomani.com/ Version: 1.0 html body onload=javascript:fireForms form method=POST name=form0 action= http://www.site.com/path/admin/index.ph...
Jobscript4Web 3.5 - Multiple CSRF Vulnerability
No description provided by source. Title: Jobscript4Web 3.5 Multiple CSRF Vulnerability Date: 17/12/2009 Author: bi0 Software Link: http://www.jobscript4web.com/ Version: 3.5 CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...
ZTE ZXDSL 831IIV7.5.0a_Z29_OV Multiple Vulnerabilities
No description provided by source. Exploit Title: ZTE ZXDSL 831IIV7.5.0aZ29OV Multiple vulnerabilities Date: 28 / 10 / 2011 . Authors: Mehdi Boukazoula ; Ibrahim Debeche . Software Link with patch : Version: v 831IIV7.5.0aZ29OV Tested on: v 831IIV7.5.0aZ29OV, May Affect all ZTE routers !!...
CitrusDB 0.3.6 - Remote Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12560/info CitrusDB is reportedly affected by an authentication bypass vulnerability. This issue is due to the application using a static value during the creation of user cookie information. An attacker could exploit thi...
Spitfire CMS 1.1.4 - CSRF Vulnerability
No description provided by source. Exploit Title: spitefire CMS - CSRF / ADD / EDTI / UPLOAD FILE Date: 2013 15 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://spitfire.clausmuus.de/ Tested on: Lin...
Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability
No description provided by source. Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability Date: 26.09.2013r. Exploit Author: Hubert Grądek PL Software Link: download link if available Tested on: HP-E2620 24-PoEP // RA.15.05.0006,ROMRA.15.10 HTTP Headers:...
ImgPals Photo Host 1.0 - Admin Account Disactivation
No description provided by source. -=--------------------ADVISORY-------------------=- ImgPals Photo Host Version 1.0 STABLE Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: ImgPals Photo Host -=+ Version: 1.0 STABLE -=+...
D-Link DIR-300 - CSRF Vulnerability (Change Admin Account Settings)
No description provided by source...
Flyspray 0.9.9.6 CSRF Vulnerability
No description provided by source. Exploit Title: Flyspray 0.9.9.6 CSRF Vulnerability Date: 06 Feb 2012 Author: Vaibhav Gupta Software Link: http://flyspray.org/flyspray-0.9.9.6.zip Version: 0.9.9.6 +---+CSRF Add Admin Account after authentication+---+ html body...
Cross-Site Request Forgery (CSRF) in Kanboard
High-Tech Bridge Security Research Lab discovered vulnerability in Kanboard, which can be exploited to perform Сross-Site Request Forgery CSRF attacks and gain complete control over the vulnerable application. 1. Сross-Site Request Forgery CSRF in Kanboard: CVE-2014-3920 The vulnerability exists...
ASPCMS信息泄漏包括管理员帐号
简要描述： 详细说明： ASPCMS最新版2.5.2以及ASPCMS2.3.x都存在这个问题，应该是通杀 在ASPCMS2.3.x中，ASPCMS的数据库在/data/目录下，为了防止数据库被下载，把数据库文件data.mdb重新命名为data.asp，由于设置不当，使用%23编码即可绕过访问，导致信息泄漏： http://127.0.0.1/data/%23data.asp 在最新版的2.5.2中，把数据库文件aspcms252.mdb重新命名为aspcms252.asp，由于配置不当，使用%23编码即可绕过访问，导致信息泄漏：...
Bonefire v.0.7.1 - Reinstall Admin Account Exploit
Exploit for php platform in category web applications !/usr/bin/env python coding: utf-8 Bonefire v.0.7.1 Reinstall Admin Account Exploit Author : Mehmet INCE Analysis write-up : http://www.mehmetince.net/ci-bonefire-reinstall-admin-account-vulnerability-analysis-exploit/ Description : Forgotten...
Bonefire 0.7.1 - Reinstall Admin Account
!/usr/bin/env python coding: utf-8 Bonefire v.0.7.1 Reinstall Admin Account Exploit Author : Mehmet INCE Analysis write-up : http://www.mehmetince.net/ci-bonefire-reinstall-admin-account-vulnerability-analysis-exploit/ Description : Forgotten controls lead to call install module which lead to...
No-CMS 0.6.6 rev 1 - Admin Account Hijacking Remote Code Execution via Static Encryption Key
No-CMS 0.6.6 rev 1 - Admin Account Hijacking Remote Code Execution via Static Encryption Key ?php / Static encryptionkey of No-CMS lead to Session Array Injection in order to hijack administrator account then you will be able for upload php files to server via theme/module upload. This exploit...
No-CMS 0.6.6 rev 1 - Admin Account Hijacking / Remote Code Execution via Static Encryption Key
mcryptexists = functionexists'mcryptencrypt'; logmessage'debug', 'Enc...
No-CMS 0.6.6 Rev 1 Account Hijack / Remote Command Execution
mcryptexists = functionexists'mcryptencrypt';...
Discuz! X2.5 / X3 / X3.1 可CSRF删管理员账号
简要描述： 接着上次的漏洞来…… 详细说明： 上次那个漏洞： WooYun: Discuz! X2.5 / X3 / X3.1中CSRF攻击防御可被绕过 你们回复说是程序员认为不需要校验才这么设置……那这回应该算是你设计问题了吧 后台删除用户页面只是单纯做了submitcheck'submit', 1，按之前的说明，程序这里没有判断formhash，也就是说可以用于CSRF 不过利用这个漏洞前提是要管理员登陆了后台，不过这个不会很麻烦吧（比如故意加点关键字进审核然后让管理员触发神马的，实在不行还能发帖钓鱼） 漏洞证明： 发帖插入 Discuz! 代码：...
HDWIKI tasteless 0day-vulnerability warning-the black bar safety net
model/user.class.php to: function addreferer if$SERVER'HTTPREFERER' $this-db-query"UPDATE". DBTABLEPRE."session SET referer='".$ SERVER'HTTPREFERER'."' WHERE sid='". base::hgetcookie'sid'."'"; //Problems then this functiongetreferer $session=$this-db-fetchfirst"SELECTreferer FROM "...
osCommerce v2.x SQL Injection Vulnerability
Exploit for php platform in category web applications Title: osCommerce v2.x SQL Injection Vulnerability Dork: Powered by osCommerce Author: Ahmed Aboul-Ela Contact: ahmed.aboul3laatgmaildotcom - http://twitter.com/secgeek Vendor : http://www.oscommerce.com Version: v2.3.3.4 current latest releas...
