TomatoCMS 2.0.5 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Sun 11 Jul 2010 03:36:08 PM EEST Vendor: http://www.tomatocms.com/ Download: None --- -= CSRF PoC 1 - Change Administrator Password =- TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create Admin User =- TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities -...

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Sun 11 Jul 2010 08:08:10 PM EEST Vendor: http://www.novo-ws.com/orbis-cms/ Download: http://www.ohloh.net/p/orbis-cms/download?filename=orbis-1.0.2.zip --- -= CSRF PoC 1 - Change Admin Password =- Orbis CMS 1.0.2 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create...

TomatoCart 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download: http://www.tomatocart.com/component/extensionmanage/?task=downloadfiles&file=tomatocart-1.0.1.zip --- -= CSRF PoC 1 - Create Admin User =- TomatoCart 1.0.1 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF...

TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================= TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities ============================================= Date: Sun 11 Jul 2010 03:36:08 PM EEST Vendor: http://www.tomatocms.com/ Download: None --- -= CSRF PoC 1...

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Sun 11 Jul 2010 08:08:10 PM EEST Vendor: http://www.novo-ws.com/orbis-cms/ Download: http://www.ohloh.net/p/orbis-cms/download?filename=orbis-1.0.2.zip --- -= CSRF PoC 1 - Change Admin Password =- Orbis CMS 1.0.2 Multiple...

[MajorSecurity SA-068]Anantasoft Gazelle CMS - change admin password via Cross-site Request Forgery

MajorSecurity SA-068Anantasoft Gazelle CMS - change admin password via Cross-site Request Forgery Details ======= Product: Anantasoft Gazelle CMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.anantasoft.com Vendor-Status: informed Advisory-Status: published Credits ============...

AdaptCMS Lite 1.5 Cross Site Request Forgery

=========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download : http://sourceforge.net/projects/adaptcms/files/AdaptCMS%20Lite%20v1/1.5/AdaptCMSLite1.5.zip/download Advisory ...

AdaptCMS Lite 1.5 - Arbitrary Add Admin

AdaptCMS Lite 1.5 - Arbitrary Add Admin =========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download :...

AdaptCMS Lite 1.5 - Arbitrary Add Admin

=========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download : http://sourceforge.net/projects/adaptcms/files/AdaptCMS%20Lite%20v1/1.5/AdaptCMSLite1.5.zip/download Advisory ...

NinkoBB 1.3RC4 Change Admin and Add New Admin CSRF Vulnerability

Exploit for unknown platform in category web applications ================================================================ NinkoBB 1.3RC4 Change Admin and Add New Admin CSRF Vulnerability ================================================================ change admin user,passwd & add new admin use...

easyPortal 1.0.0 XSS / XSRF

----------------------------------------------------------------------------------------------- Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 02. January 2010. ----------------------------------------------------------------------------------------------- Application: easyPortal...

easyPortal v1.0.0 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ========================================== easyPortal v1.0.0 Multiple Vulnerabilities ========================================== ----------------------------------------------------------------------------------------------- Application:...

eazyPortal 1.0.0 - Multiple Vulnerabilities

eazyPortal 1.0.0 - Multiple Vulnerabilities ----------------------------------------------------------------------------------------------- Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 02. January 2010...

Ez News Manager Pro - Cross-Site Request Forgery (Change Admin Password)

Ez News Manager Pro - Cross-Site Request Forgery Change Admin Password ----------------------------------------------------------------------------------------------- Title: Ez News Manager / Pro - XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15...

Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities

Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities ----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez News Manager / Pro XSRF

----------------------------------------------------------------------------------------------- Title: Ez News Manager / Pro - XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez Blog 1.0 XSS / XSRF

----------------------------------------------------------------------------------------------- Title: Ez Blog XSS/XSRF Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez Cart Cross Site Request Forgery

----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez Blog v1.0 (XSS/XSRF) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================ Ez Blog v1.0 XSS/XSRF Multiple Vulnerabilities ================================================ ----------------------------------------------------------------------------------------------...

Ez Blog v1.0 (XSS/XSRF) Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Ez Blog XSS/XSRF Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...