Hycus CMS 1.0.1 - Multiple Cross Site Request Forgery Vulnerabilities

No description provided by source. !--- Title: Hycus CMS 1.0.1 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Thu 26 Aug 2010 07:53:22 PM EEST Vendor: http://www.hycus.com/ Download: http://www.hycus.com/download/hycuscms-1.0.1.zip --- -= CSRF PoC 1 - Change Admin Password =-...

mrcgiguy the ticket system 2.0 php Multiple Vulnerabilities

No description provided by source. MRCGIGUY The Ticket System 2.0 PHPid Multiple Remote Vulnerabilities Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.mrcgiguy.com Special Thx: All Muslims All Members Of Team Algerien Of FootBall Note: Algerie 3-1 Egypt Exploit:...

Dlink DCS series CSRF Change Admin Password

No description provided by source. Title: Dlink DCS series CSRF Change Admin Password Version: DCS-900, DCS-2000, DCS-5300 and possibly other. Date: 2012-02-22 Author: rigan - imrigan sobachka gmail.com -- Description: Dlink DCS is a series of network cameras. These cameras use a web interface...

GetSimple CMS 2.01 - Multiple Vulnerabilities (XSS/CSRF)

No description provided by source. !--- Title: GetSimple CMS 2.01 Multiple Vulnerabilities XSS/CSRF Author: 10n1z3d 10n1z3datwdotcn Date: Mon 12 Jul 2010 12:11:45 PM EEST Vendor: http://get-simple.info/ Download: http://www.box.net/get-simple --- -= CSRF PoC 1 - Change Admin Password =- html head...

The Gemini Portal <= 4.7 Insecure Cookie Handling Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- The Gemini Portal = 4.7 / Insecure Cookie Handling Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Program: The Gemini Portal Version: = 4.7 File affected: admin/...

Travel Portal Script Admin Password Change - CSRF Vulnerability

No description provided by source. ===================================================== Travel PORTAL = Admin Password Change CSRF Exploit ===================================================== My + Author : KnocKout Contact : [email protected] Software info |Web App. : Travel PORTAL |Price : 299...

Beetel TC1-450 Airtel Wireless Router - Multiple CSRF Vulnerabilities

No description provided by source. Exploit Title: Beetel TC1-450 Airtel Wireless Router - Multiple CSRF Vulnerabilities Date: 12/13/2013 Author: SaMaN @samanL33T Vendor Homepage:http://www.beetel.in/node/10139 Category: Hardware/Wireless Router Firmware Version: TM4-0Q-020 and below Tested on:...

MyBB DyMy User Agent Plugin (newreply.php) - SQL Injection Vulnerability

No description provided by source. Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username We fire up HTTP Live...

TomatoCart 1.0.1 - Multiple CSRF Vulnerabilities

No description provided by source. !--- Title: TomatoCart 1.0.1 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download:...

GuppY 2.4 - Remote File Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8769/info GuppY is prone to an issue that could allow a remote attacker to read or write to files on the vulnerable server. This issue presents itself in the tinymsg.php component of the software. The attacker could only...

Haberx 1.02 <= 1.1- (tr) Remote SQL Injection Vulnerability

No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download:...

osCommerce 2.2 - CSRF

No description provided by source. Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2 Tested on: Mac OS X 10.6.4, osCommerce v2.2 RC2A Dutch This is the code that you can execute to change the admin pass:...

eazyPortal 1.0.0 - Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 02. January 2010...

Bigace_2.7.3 CSRF Change Admin Password PoC

No description provided by source. !/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7.3 Software detail: BIGACE -...

Recipe Script 5.0 - Shell Upload/CSRF/XSS Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Recipe Script v5.0 Shell Upload/XSRF/XSS Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 16. December 2009...

ProQuiz 2.0.2 - CSRF Vulnerability

No description provided by source. Exploit Title: ProQuiz v2.0.2 CSRF Vulnerability Author: DaOne Date: 19/8/2012 Software Link: http://code.google.com/p/proquiz/downloads/list CSRF Change Admin Password /form html body onload=document.form0.submit; form method=POST name=form0...

CMSimple - CSRF Vulnerability

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-18-cmsimple-xsrf-vulnerability/ ''' - Title : CMSimple XSRF Vulnerability - Affected Version :CMSimple =3.2...

Cisco EPC3925 - Cross Site Request Forgery

Cisco EPC3925是美国思科（Cisco）公司的一款家用无线路由器设备。 Cisco EPC3925路由器中存在跨站请求伪造漏洞，该漏洞源于goform/Quicksetup URL没有正确验证请求。远程攻击者可借助Password和PasswordReEnter参数利用该漏洞更改密码。 Exploit Title: Cisco EPC3925 ? Cross Site Request Forgery Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage:...

Vacation Rental Script SQL Injection Vulnerability

No description provided by source. ::::::::::::::::::::::::: Exploit Title : vacation Rental Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

TOSHIBA e-Studio 232/233/282/283 - Change Admin Password CSRF Vulnerability

No description provided by source. Exploit Title: TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF Vulnerability Date: 02.10.2013 Exploit Author: Hubert Gradek PL Affected version: firmware T377SY0EXXX Tested on: TOSHIBA e-Studio 232 T377SY0E354 / 233 T377SY0E331 CVE : No CVE exists -...