Web@All 1.1 Remote Admin Settings Change Exploit

=========================================== Web@all Date: 27/12/2010 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- Application Info: web@all 1.1 web@all is a CMS which is not similar to general CMS, you can build it easyly by yourself...

D-Link DIR-300/320/600/615 unauthorized access

It's possible to change administration password without knowledge of old password...

shoutcaststats.v0.5 Changer Login and Pass CSRF Vulnerability

Exploit for php platform in category web applications ============================================================= shoutcaststats.v0.5 Changer Login and Pass CSRF Vulnerability ============================================================= || || | || o,7 || . o7 || 4||| ow, : / /...

PHPGallery 1.1.0 Cross Site Request Forgery

------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ : -------------------------------------------------------------------------...

Plogger Gallery 1.0 CSRF Change Admin Password

Exploit for php platform in category web applications ============================================== Plogger Gallery 1.0 CSRF Change Admin Password ============================================== ------------------------------------------------------------------------- Software : PloggerGallery...

PHPGallery 1.1.0 CSRF Vulnerability

Exploit for php platform in category web applications =================================== PHPGallery 1.1.0 CSRF Vulnerability =================================== ------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a...

Plogger Gallery 1.0 Cross Site Request Forgery

------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/ ------------------------------------------------------------------------- +---+CSRF Chang...

Plogger Gallery 1.0 - Cross-Site Request Forgery (Change Admin Password)

Plogger Gallery 1.0 - Cross-Site Request Forgery Change Admin Password ------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/...

Plogger Gallery 1.0 - Cross-Site Request Forgery (Change Admin Password)

------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/ ------------------------------------------------------------------------- +---+CSRF Chang...

PHPGallery 1.1.0 - Cross-Site Request Forgery

------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ : -------------------------------------------------------------------------...

PHPGallery 1.1.0 - Cross-Site Request Forgery

PHPGallery 1.1.0 - Cross-Site Request Forgery ------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ :...

osCommerce v2.2 CSRF Vulnerability

Exploit for php platform in category web applications ================================== osCommerce v2.2 CSRF Vulnerability ================================== Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2...

SweetRice 0.6.7 Cross Site Scripting / SQL Injection

========================================== Vulnerability ID: HTB22667 Reference: http://www.htbridge.ch/advisory/sqlinjectioninsweetricecms.html Product: SweetRice CMS Vendor: basic-cms.org http://www.basic-cms.org/ Vulnerable Version: 0.6.7 Vendor Notification: 21 October 2010 Vulnerability Type...

SweetRice 0.6.7 - Multiple Vulnerabilities

SweetRice 0.6.7 - Multiple Vulnerabilities Vulnerability ID: HTB22669 Reference: http://www.htbridge.ch/advisory/resetadminpasswordinsweetricecms.html Product: SweetRice CMS Vendor: basic-cms.org http://www.basic-cms.org/ Vulnerable Version: 0.6.7 Vendor Notification: 21 October 2010 Vulnerabilit...

Bigace_2.7.3 CSRF Change Admin Password POC

Exploit for php platform in category web applications =========================================== Bigace2.7.3 CSRF Change Admin Password POC =========================================== !/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software lin...

Bigace 2.7.3 Cross Site Request Forgery

!/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7.3 Software detail: BIGACE - Dynamic Web CMS - is a free,...

BigACE 2.7.3 - Cross-Site Request Forgery (Change Admin Password)

BigACE 2.7.3 - Cross-Site Request Forgery Change Admin Password !/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7...

R7-0037: SAP BusinessObjects Axis2 Default Admin Password

R7-0037: SAP BusinessObjects Axis2 Default Admin Password October 13th, 2010 Description: The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone with access to the Axis2 port...

Travel Portal Script - Cross-Site Request Forgery (Admin Password Change)

Travel Portal Script - Cross-Site Request Forgery Admin Password Change ===================================================== Travel PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Exploited by KnocKout Travel Portal - Remote Admin Password Change CSRF Exploited by KnocKout...

Event Ticket Portal Script Cross Site Request Forgery

=========================================================== Event Ticket PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Event Ticket PORTAL - Admin Password Chage CSRF Exploited by KnocKout Username: New Password: input type="subm...