CVE-2008-5565: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...

CVE-2008-5567: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/adsettings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...

HTMPL 1.11 (htmpl_admin.cgi help) Command Execution Vulnerability

Exploit for cgi platform in category web applications ================================================================= HTMPL 1.11 htmpladmin.cgi help Command Execution Vulnerability ================================================================= Software : HTMPL v1.11 Download Link :...

HTMPL 1.11 - Command Execution

HTMPL 1.11 - Command Execution Software : HTMPL v1.11 Download Link : http://vmeste.org/templex/doc/1.html Vulnrability : Command Execution Severity : High Author : ZeN Website : http://dusecurity.com / http://darkcode.me/ Exploit : site.com/cgi-bin/htmpladmin.cgi?help=|cat /etc/passwd A few othe...

HTMPL 1.11 Code Execution

Software : HTMPL v1.11 Download Link : http://vmeste.org/templex/doc/1.html Vulnrability : Command Execution Severity : High Author : ZeN Website : http://dusecurity.com / http://darkcode.me/ Exploit : site.com/cgi-bin/htmpladmin.cgi?help=|cat /etc/passwd A few other little..... tricks The admins...

HTMPL 1.11 - Command Execution

Software : HTMPL v1.11 Download Link : http://vmeste.org/templex/doc/1.html Vulnrability : Command Execution Severity : High Author : ZeN Website : http://dusecurity.com / http://darkcode.me/ Exploit : site.com/cgi-bin/htmpladmin.cgi?help=|cat /etc/passwd A few other little..... tricks The admins...

IPNPro3 <= 1.44 Admin Password Changing Exploit

No description provided by source. ?php / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

PayPal eStore - Admin Password Change

PayPal eStore - Admin Password Change === LIVE === » removed... === Greetz === » ALLAH » Tornado2800 » B13 Â...

IPNPro3 1.44 - Admin Password Changing

IPNPro3 1.44 - Admin Password Changing === LIVE === » removed... === Greetz === » ALLAH » Tornado2800 » B13...

DL PayCart <= 1.34 Admin Password Changing Exploit

Exploit for unknown platform in category web applications ================================================== DL PayCart = 1.34 Admin Password Changing Exploit ================================================== ?php / ============================================================================== /...

DL PayCart 1.34 - Admin Password Changing

DL PayCart 1.34 - Admin Password Changing === LIVE === » removed... === Greetz === » ALLAH » Tornado2800 »...

Bonza Cart <= 1.10 Admin Password Changing Exploit

Exploit for unknown platform in category web applications ================================================== Bonza Cart = 1.10 Admin Password Changing Exploit ================================================== ?php / ============================================================================== /...

IPNPro3 <= 1.44 Admin Password Changing Exploit

Exploit for unknown platform in category web applications =============================================== IPNPro3 = 1.44 Admin Password Changing Exploit =============================================== ?php / ============================================================================== / \ | | | ...

IPNPro3 < 1.44 - Admin Password Changing

=== LIVE === » removed... === Greetz === » ALLAH » Tornado2800 » B13 » AFSHIN-ZARBAT » QU1E » Hussain-X d...

DL PayCart 1.34 - Admin Password Changing

=== LIVE === » removed... === Greetz === » ALLAH » Tornado2800 » B13 » AFSHIN-ZARBAT » QU1E » Hussain-...

OpenForum 0.66 Beta Remote Reset Admin Password Exploit

No description provided by source. !/usr/bin/perl -w ======================================================== OpenForum 0.66 Beta Remote Reset Admin Password Exploit ======================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

OpenForum 0.66 Beta - Remote Reset Admin Password

OpenForum 0.66 Beta - Remote Reset Admin Password !/usr/bin/perl -w ======================================================== OpenForum 0.66 Beta Remote Reset Admin Password Exploit ======================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

OpenForum 0.66 Beta Remote Reset Admin Password Exploit

Exploit for unknown platform in category web applications ======================================================= OpenForum 0.66 Beta Remote Reset Admin Password Exploit ======================================================= !/usr/bin/perl -w...

SimpleBlog 3.0 (simpleBlog.mdb) Database Disclosure Vulnerability

No description provided by source. » SimpleBlog 3.0 Mdb Vulnerability » » ---------------------------------------------------------- » Author : ELMuHaMMeD » » Date : 26.11.2008 » » Contact : [email protected] » » ----------------------------------------------------------- Script : SimpleBlog...

CVE-2008-5219

The password change feature admin/cp.php in VideoScript 4.0.1.50 and earlier does not check for administrative authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified npass and npass1 parameters...