2390 matches found
admin/fixcwdmemberships.jsp lacks an XSRF token to run the repair action.
admin/fixcwdmemberships.jsp does not require a csrf token to run the repair action. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...
CVE-2012-1670
admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database via a SaveSQL action...
Disable browser password save on Admin page in Firefox
In Chrome, Safari and IE there is no browser prompt to store the password but on Firefox both Mac and Windows I get prompted to save the password. We are only concerned about this for the Admin page password prompt specifically...
Disable browser password save on Admin page in Firefox
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-25008. panel In Chrome, Safari and IE there is no browser prompt to store the password but on Firefox both Mac and Windows I get...
Disable browser password save on Admin page in Firefox
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-25008. panel In Chrome, Safari and IE there is no browser prompt to store the password but on Firefox both Mac and Windows I ge...
CnnCMS 1.x SQL Injection Vulnerability
Exploit for php platform in category web applications :-------------------------------------------------------------------------------------------------------------------------: : Exploit Title : CnnCMS 1.x SQL Injection Vulnerability : Date : March 3rd 2012 : Author : X-Cisadane : Software Link ...
CityVariety SQL Injection
================================================================================= Web : ashiyane.org e-mail : HashoR DOT BackHat AT Gmail.Com I'm HashoR , member from ashiyane.org -!We Love KurDestaN!- ================================================================================...
CityVariety SQL Injection Vulnerability
Exploit for php platform in category web applications Web : ashiyane.org e-mail : HashoR DOT BackHat AT Gmail.Com I'm HashoR , member from ashiyane.org -!We Love KurDestaN!- ------|-------------------------------------------------------|------ Exploit : CityVariety Demo: Demo:...
Inet Revolution SQL Injection Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ Exploit Title: Inet Revolution http://gyankalash.com/pages.php?q=14' - http://stvishnaschool.com/pages.php?q=4' - http://concordsecurity.org/service.php?id=4' - Admin Pag...
ecshop 4 8 leak site path vulnerability-vulnerability warning-the black bar safety net
http:// 网站 /shop/api/cron.php http:// 网站 /shop/wap/goods.php http:// 网站 /shop/temp/compiled/urhere.lbi.php http:// 网站 /shop/temp/compiled/pages.lbi.php http:// 网站 /shop/temp/compiled/usertransaction.dwt.php http:// 网站 /shop/temp/compiled/history.lbi.php http:// 网站...
Climeweb Remote SQL Injection
========================================================================== Exploit Title: Climeweb Blind SQL Injection Vulnerability Date: 11.10.2011 Author: poach3r Software Link: http://www.climeweb.com/ Tested on: Windows XP SP3 Google Dork: "Powered by Climeweb" inurl:"indux.php"...
The Formula Group SQL Injection
============================================ Exploit Title : The Formula Group Auth bypass Google Dork : intext:"WEB DESIGN BY THE FORMULA" Date : 2011-2-10 Author : nGa Sa Lu GaNgst3r Service Link : http://www.theformula.co.za/index.phptheform Tested on : Vista Platform : asp...
TunerLabs SQL Injection
================================================ Exploit Title : TunerLabs SQL Injection Vulnerability Google Dork : intext:"Powered by TunerLabs" Date : 2011-21-09 Author : nGa Sa Lu GaNgst3r Service Link : http://www.tunerlabs.com Tested on : Vista Platform : php + Google Dork : intext:"Powered...
WordPress Auctions 1.8.8 SQL Injection
Exploit Title: WordPress Auctions plugin @AlligatorTeam Software Link: http://downloads.wordpress.org/plugin/wp-auctions.zip Version: 1.8.8 tested --------------- PoC --------------- URL:...
CVE-2011-3127
CVE-2011-3127 affects WordPress: versions 3.1 before 3.1.3 and 3.2 before Beta 2 do not prevent framing of admin or login pages, enabling clickjacking via a crafted site. Root cause: missing frame-embedding protection. Impact is remote via crafted site; mitigation is upgrading to WordPress 3.1.3 ...
Careernet SQL Injection
|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ =5 / +Exploit : / http://www.target.com/index.php?id=SQLi / +Demo: / http://blog.careernet.co.in/index.php?id=1SQLi / +admin page / http://careernet.co.in/cp/ / + talbe admin...
Cart Software Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: sabadkharid CMS Multiple Vulnerabilities Date: 8/07/2011 Author: hosinn Software Link: http://www.sabadkharid.com Version: professional edition Platform / Tested on: Multiple Category: webapplications Code : N/A Download Video:...
CVE-2011-2743
Multiple cross-site scripting XSS vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to 1 the default URI or 2 includes/javascript.php, or the 3 title or 4 body parameter to admin/help.php...
Bilyana Iliykova SQL Injection
|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...
Ileys Technology Inc SQL injection Vulnerability
Exploit for php platform in category web applications + Exploit Title : Ileys Technology Inc.. SQL injection Vulnerability + Date : 10 June 2011 + Author : k's0uR! + Category : WebApps + d0rk : "Site Designed & Developed by: Ileys Technology Inc" + Faceb00k :...