YVS Image Gallery SQL Injection

-=--------------------ADVISORY-------------------=- YVS Image Gallery Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: YVS Image Gallery -=+ Version: 0.0.0.1 -=+ Vendor's URL: http://yvs.vacau.com/gallery.html -=+ Platform:...

D-Link DCS Series Cross Site Request Forgery

Title: Dlink DCS series CSRF Change Admin Password Version: DCS-900, DCS-2000, DCS-5300 and possibly other. Date: 2012-02-22 Author: rigan - imrigan sobachka gmail.com -- Description: Dlink DCS is a series of network cameras. These cameras use a web interface which is prone to CSRF vulnerabilitie...

Dlink DCS series CSRF Change Admin Password

Exploit for hardware platform in category web applications Title: Dlink DCS series CSRF Change Admin Password Version: DCS-900, DCS-2000, DCS-5300 and possibly other. Date: 2012-02-22 Author: rigan - imrigan sobachka gmail.com -- Description: Dlink DCS is a series of network cameras. These camera...

Cisco Linksys WAG54GS Cross Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Cisco Linksys WAG54GS ADSL Router change admin password Date : 20-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site :...

D-Link DCS Series - Cross-Site Request Forgery (Change Admin Password)

Title: Dlink DCS series CSRF Change Admin Password Version: DCS-900, DCS-2000, DCS-5300 and possibly other. Date: 2012-02-22 Author: rigan - imrigan sobachka gmail.com -- Description: Dlink DCS is a series of network cameras. These cameras use a web interface which is prone to CSRF vulnerabilitie...

Cisco Linksys WAG54GS - Cross-Site Request Forgery (Change Admin Password)

Cisco Linksys WAG54GS - Cross-Site Request Forgery Change Admin Password +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Cisco Linksys WAG54GS ADSL Router change admin password Date : 20-02-2012...

D-Link DSL-2640B (ADSL Router) CSRF flaws and fixes-vulnerability warning-the black bar safety net

Title: D-Link DSL-2640B ADSL Router CSRF Vulnerability Author: Ivano Binetti www.badguest.cn http://ivanobinetti.com Program website: http://www.d-link.com Affected version: DSL-2640B Test platform: Firmware Version: EU4. 0 0; Hardware Version: B2 +-----------------------------------------------...

Cisco Linksys WAG54GS - Cross-Site Request Forgery (Change Admin Password)

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Cisco Linksys WAG54GS ADSL Router change admin password Date : 20-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site :...

D-Link DSL-2640B (ADSL Router) CSRF Vulnerability

Exploit for hardware platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti...

D-Link DSL-2640B Cross Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://www.d-link.com...

11in1 CMS 1.2.1 - Cross-Site Request Forgery (Admin Password)

11in1 CMS 1.2.1 - Cross-Site Request Forgery Admin Password source: https://www.securityfocus.com/bid/52025/info 11in1 is prone to a cross-site request-forgery and a local file include vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

11in1 CMS 1.2.1 - Cross-Site Request Forgery (Admin Password)

source: https://www.securityfocus.com/bid/52025/info 11in1 is prone to a cross-site request-forgery and a local file include vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal...

Ananta Gazelle CMS upload statement for registration and fix-vulnerability warning-the black bar safety net

The head of the table: Ananta Gazelle CMS - Update Statement Sql injection Author: hackme Download address: http://sourceforge.net/projects/ananta/files/stable/Gazelle 1.0 stable/AnantaGazelle1.0.zip/ Impact version: 1.0 stable Test platform: backbox 2.1 First for my bad English, sorry + This...

ShuzirenCMS v4. 0 background Get a Shell and fix-vulnerability warning-the black bar safety net

A simple look under the... Find Asp Php script permission to seal too tightly throughout the website, directory any one not to write Test environment/system: Digital Information Center content management system ShuzirenCMS v4. 0 / Windows Regardless of your social worker,dig yourself the...

Akiva Webboard SQL Injection

Hey, this is my first time that i report a vulnerability to a mailing list. The problem on the Akiva Webboard is, that you can login as Administrator with admin'-- SQL Injection and if you go to the adminprofil you can see the Adminpasswort in the HTML code. The current version is 9. I do only kn...

GotoCode Online Classifieds - Multiple Vulnerabilities

GotoCode Online Classifieds - Multiple Vulnerabilities Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link :...

GotoCode Online Classifieds Access Bypass

Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link : http://www.gotocode.com/apps.asp?appid=5& Platform : ASP.NET Test...

GotoCode Online Classifieds - Multiple Vulnerabilities

Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link : http://www.gotocode.com/apps.asp?appid=5& Platform : ASP.NET Test...

GotoCode Online Classifieds Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : email protected Impact : High Software Link :...

CVE-2011-2190

The generateadminpassword function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack...