Tickets CAD 2.20G - Multiple Vulnerabilities

Tickets CAD 2.20G - Multiple Vulnerabilities Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities Date: Aug 4 2012 Exploit Author: chap0 @chap0 Vendor Homepage: http://www.ticketscad.org Software Link: http://www.ticketscad.org/downloads/Tickets06222012V220G.zip Version: 2.20G Tested on:...

Tickets CAD 2.20G - Multiple Vulnerabilities

Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities Date: Aug 4 2012 Exploit Author: chap0 @chap0 Vendor Homepage: http://www.ticketscad.org Software Link: http://www.ticketscad.org/downloads/Tickets06222012V220G.zip Version: 2.20G Tested on: Ubuntu Tickets CAD 2.20G is vulnerable to multip...

A school/government CMS default background account password-loophole warning-the black bar safety net

Author:Exp1oITs Not a Oday Today went to zone-h submitted to the Black page, find foreign a hacking the Black page all the Chinese gov site. So see, a lot of government and school station there is this problem, should not back door. However, the government so do not mind let us Heavenly good...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an adduser admin action...

DSA-2510-1 extplorer - Cross-site request forgery

Bulletin has no description...

Ndot Deals Script CSRF Vulnerabilties

Exploit for php platform in category web applications Ndot Deals Script Multiple Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.ndot.in/products/ndotdeals-opensource-groupon-clone .:...

Simple Web Content Management System 1.1 SQL Injection

Exploit Title: Simple Web Content Management System SQL Injection Date: May 30th 2012 Author: loneferret Version: 1.1 Application Url: http://www.cms-center.com/ Tested on: Ubuntu Server 8.04 / PHP Version 5.2.4-2ubuntu5.23 Discovered by: loneferret Side note: This application is nothing fancy, a...

Car Portal CMS v3.0 - Multiple Web Vulnerabilities

Document Title: =============== Car Portal CMS v3.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=502 Release Date: ============= 2012-04-23 Vulnerability Laboratory ID VL-ID: ==================================== 502...

SmartJobBoard 3.4 b5140 XSS / CSRF

Exploit for php platform in category web applications Title: ====== SmartJobBoard v3.4 b5140 - Multiple Web Vulnerabilites Introduction: ============= SmartJobBoard is an advanced software platform for creating professional job board web sites. It includes everything you need for running,...

SmartJobBoard v3.4 b5140 - Multiple Web vulnerabilities

Document Title: =============== SmartJobBoard v3.4 b5140 - Multiple Web vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=490 Release Date: ============= 2012-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 490...

SmartJobBoard v3.4 b5140 - Multiple Web vulnerabilities

Document Title: =============== SmartJobBoard v3.4 b5140 - Multiple Web vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=490 Release Date: ============= 2012-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 490...

ImgPals Photo Host Version 1.0 Admin Account Disactivation

-=--------------------ADVISORY-------------------=- ImgPals Photo Host Version 1.0 STABLE Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: ImgPals Photo Host -=+ Version: 1.0 STABLE -=+ Vendor's URL:...

IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 Multiple Remote Code Execution Vulnerabilities

IBM Tivoli Provisioning Manager soapServlet SOAP Message Printer.getPrinterAgentKey SQL Injection Vulnerability This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Provisioning Manager Express for Software Distribution. Authentication is...

ImgPals Photo Host 1.0 - Admin Account Disactivation

-=--------------------ADVISORY-------------------=- ImgPals Photo Host Version 1.0 STABLE Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: ImgPals Photo Host -=+ Version: 1.0 STABLE -=+ Vendor's URL:...

ImgPals Photo Host Version 1.0 Admin Account Disactivation

Exploit for php platform in category web applications -=--------------------ADVISORY-------------------=- ImgPals Photo Host Version 1.0 STABLE Author: Corrado Liotta Aka CorryL email protected -=-----------------------------------------------=- -=+ Application: ImgPals Photo Host -=+ Version: 1....

ImgPals Photo Host 1.0 Stable Admin Account Deactivation

-=--------------------ADVISORY-------------------=- ImgPals Photo Host Version 1.0 STABLE Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: ImgPals Photo Host -=+ Version: 1.0 STABLE -=+ Vendor's URL:...

CVE-2012-1288

The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session...

SyndeoCMS <= 3.0 CSRF flaws and fixes-vulnerability warning-the black bar safety net

Title: SyndeoCMS = 3.0 CSRF Vulnerability Author: Ivano Binetti http://ivanobinetti.com Program development website: http://www.syndeocms.org/ Download address: http://sourceforge.net/projects/syndeocms Affected version: 3.0 and below Test System Platform: Debian Squeeze 6.0 +--------------+Add...

SyndeoCMS 3.0 Cross Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SyndeoCMS I'm adding ADMIN account form method="POST" name="form0" action="http://127.0.0.1:80/syndeocms/starnet/index.p...

SyndeoCMS 3.0 - Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SyndeoCMS I'm adding ADMIN account input type="...