DEBIAN-CVE-2013-6275

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...

Mevin Basic PHP Events Lister 2.03 - CSRF Vulnerabilities

No description provided by source. Author: CrazyHacker Script: Mevin Basic PHP Events Lister v2.03 Exploit type: CSRF Vulnerability Add & Delete Admin Download: http://www.mevin.com/downloads/Basic-php-events-lister2.03.zip Risk: High Contact: [email protected] form name=setup...

Mevin Basic PHP Events Lister v2.03 CSRF Vulnerabilities

Exploit for php platform in category web applications Author: CrazyHacker Script: Mevin Basic PHP Events Lister v2.03 Exploit type: CSRF Vulnerability Add & Delete Admin Download: http://www.mevin.com/downloads/Basic-php-events-lister2.03.zip Risk: High Contact: email protected \// S3crity just...

Mevin Basic PHP Events Lister 2.03 - Cross-Site Request Forgery

Mevin Basic PHP Events Lister 2.03 - Cross-Site Request Forgery Author: CrazyHacker Script: Mevin Basic PHP Events Lister v2.03 Exploit type: CSRF Vulnerability Add & Delete Admin Download: http://www.mevin.com/downloads/Basic-php-events-lister2.03.zip Risk: High Contact: [email protected] \//...

Mevin Basic PHP Events Lister 2.03 Cross Site Request Forgery

Author: CrazyHacker Script: Mevin Basic PHP Events Lister v2.03 Exploit type: CSRF Vulnerability Add & Delete Admin Download: http://www.mevin.com/downloads/Basic-php-events-lister2.03.zip Risk: High Contact: [email protected] \// S3crity just Suck5 \// EOF...

Mevin Basic PHP Events Lister 2.03 - Cross-Site Request Forgery

Author: CrazyHacker Script: Mevin Basic PHP Events Lister v2.03 Exploit type: CSRF Vulnerability Add & Delete Admin Download: http://www.mevin.com/downloads/Basic-php-events-lister2.03.zip Risk: High Contact: [email protected] \// S3crity just Suck5 \// EOF...

CVE-2009-3168

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

CVE-2009-3168

Mevin Productions Basic PHP Events Lister 2.0 is vulnerable to an access control flaw where it fails to properly restrict access to the admin/reset.php and admin/user_add.php files. This security deficiency allows remote authenticated users to perform unauthorized actions, such as resetting admin...

PT-2009-5484 · Mevin Productions · Mevin Productions Basic Php Events Lister

Name of the Vulnerable Software and Affected Versions: Mevin Productions Basic PHP Events Lister version 2.0 Description: The issue concerns improper access restriction to certain PHP files, specifically admin/reset.php and admin/user add.php. This allows remote authenticated users to reset...

CVE-2009-3168: Missing Authorization

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

CVE-2008-6464: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...