Woltlab Burning Board 2.3.4 - File Disclosure

Exploit Title: Woltlab Burning Board 2.3.4 File Disclosure Vulnerability Date: 2010-11-12 Author: SFX Version: 2.3.4 CVE : N/A After you've used the Exploit to get the admin account: goto: http://lolcathost/wbb/acp/avatar.php?action=readfolder import: acp/lib download a backup:...

CVE-2010-0219

CVE-2010-0219 covers Apache Axis2 default credentials that affect dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2 and CA ARCserve D2D r15 among others. The issue arises from a default admin password (axis2), enabling remote attackers to upload a crafted web service and achieve arbitrary co...

Traidnt UP - Cross-Site Request Forgery Add Admin Account

Exploit for php platform in category web applications ========================================================= Traidnt UP - Cross-Site Request Forgery Add Admin Account ========================================================= Exploit Title: Traidnt UP - CSRF Add Admin Account Date: 24-09-2010...

Traidnt UP 3.0 Cross Site Request Forgery

Exploit Title: Traidnt UP - CSRF Add Admin Account Date: 24-09-2010 Author: G0D-F4Th3r Software Link: http://www.traidnt.net Software Download: http://traidntup.googlecode.com/files/Traidnt%20up%20V3.0.zip Version: 3.0 Exploit...

Traidnt UP - Cross-Site Request Forgery (Add Admin)

Traidnt UP - Cross-Site Request Forgery Add Admin Exploit Title: Traidnt UP - CSRF Add Admin Account Date: 24-09-2010 Author: G0D-F4Th3r Software Link: http://www.traidnt.net Software Download: http://traidntup.googlecode.com/files/Traidnt%20up%20V3.0.zip Version: 3.0 Exploit...

win32/xp sp3 Tr Add Admin Account Shellcode 127 bytes

win32/xp sp3 Tr Add Admin Account Shellcode 127 bytes. Shellcode exploit for windows platform Title : win32/xp sp3 Tr Add Admin Account Shellcode 127 bytes Proof : http://img823.imageshack.us/img823/1017/addqx.jpg Desc. : usr: zrl , pass: 123456 , localgroup: Administrator Author : ZoRLu /...

Ecshop2.7.2持久型XSS（可获得管理员帐号）

简要描述： 个人资料修改时，Javascript代码过滤不够严格，XSS代码直接进入数据库 详细说明： 密码保护问题这一项，没有使用正则过滤，其他的的都有正则过滤。我们可以在密码保护问题里输入XSS，但是后台查看会员资料是不显示密码保护问题的，所以这里必须要网站后台添加了新的 “会员注册项”时，后台查看资料就会显示了，此处填入一段引入外部js的代码:" 外部test.js文件内容如下 Ajax.call'privilege.php?act=update','id=1&username=heihei&[email protected]','',"POST","JSON"; 漏洞证明：...

win32/xp sp3 (Tr) Add Admin Account Shellcode 127 bytes

Exploit for win32 platform in category shellcode ======================================================= win32/xp sp3 Tr Add Admin Account Shellcode 127 bytes ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

DSA-2103-1 smbind - sql injection

Bulletin has no description...

PureEdit 1.4.1 Account Creation Vulnerability

Exploit for php platform in category web applications ============================================= PureEdit 1.4.1 Account Creation Vulnerability ============================================= Exploit Title: PureEdit 1.4.1 Account Creation Vulnerability Date: 22/08/2010 Author: pimpim Software Lin...

Valente Online CMS Meastro - CSRF Add Admin Account

Exploit for php platform in category web applications =================================================== Valente Online CMS Meastro - CSRF Add Admin Account =================================================== Exploit Title: Valente Online CMS Meastro - CSRF Add Admin Account Author: Mr.Hx &...

Nagios XI 2009R1.2B Cross Site Request Forgery

Advisory Information Advisory ID: NGENUITY-2010-006 Date published: Aug. 7, 2010 Class: Cross-Site Request Forgery CSRF Software Description Nagios XI is the commercial / enterprise version of the open source Nagios project. Vulnerability Description Nagios XI 2009R1.2B is vulnerable to multiple...

Nagios XI 2009R1.2B Multiple CSRF

Advisory Information Advisory ID: NGENUITY-2010-006 Date published: Aug. 7, 2010 Class: Cross-Site Request Forgery CSRF Software Description Nagios XI is the commercial / enterprise version of the open source Nagios project. Vulnerability Description Nagios XI 2009R1.2B is vulnerable to multiple...

LightNEasy 3.2 admin account hijacking csrf vulnerability

Exploit for php platform in category web applications ========================================================= LightNEasy 3.2 admin account hijacking csrf vulnerability ========================================================= Author: pimpim Software Link:...

Default credentials

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

NinkoBB (Setup Admin Account) Vulnerability

Exploit for php platform in category web applications =========================================== NinkoBB Setup Admin Account Vulnerability =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

Allomani - Super Multimedia v2.5 - CSRF Add Admin Account

Exploit for php platform in category web applications ========================================================= Allomani - Super Multimedia v2.5 - CSRF Add Admin Account ========================================================= Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin...

Allomani Super Multimedia 2.5 Cross Site Request Forgery

Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://demos.allomani.com/media250/ Version: 2.5 Tested on: http://demos.allomani.com/media250/ Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My...

Allomani E-Store 1.0 Cross Site Request Forgery

Exploit Title: Allomani - E-Store v1.0 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://demos.allomani.com/store/ Version: 1.0 Tested on: http://demos.allomani.com/store/ Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My Friends...

Allomani - E-Store v1.0 - [CSRF] Add Admin Account

Exploit for php platform in category web applications ================================================== Allomani - E-Store v1.0 - CSRF Add Admin Account ================================================== Exploit Title: Allomani - E-Store v1.0 - CSRF Add Admin Account Date: 29-06-2010 Author:...