GetSimple CMS v2.01 (XSS/CSRF) Vulnerabilities

Exploit for php platform in category web applications ============================================== GetSimple CMS v2.01 XSS/CSRF Vulnerabilities ============================================== Date: Mon 12 Jul 2010 12:11:45 PM EEST Vendor: http://get-simple.info/ Download:...

Grafik CMS 1.1.2 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================== Grafik CMS 1.1.2 Multiple CSRF Vulnerabilities ============================================== Date: Mon 12 Jul 2010 07:07:22 PM EEST Vendor: http://www.grafik-power.com/grafikcms/ Download: None -...

Getsimple CMS 2.01 - Multiple Vulnerabilities

Getsimple CMS 2.01 - Multiple Vulnerabilities Date: Mon 12 Jul 2010 12:11:45 PM EEST Vendor: http://get-simple.info/ Download: http://www.box.net/get-simple --- -= CSRF PoC 1 - Change Admin Password =- GetSimple CMS 2.01 Multiple Vulnerabilities XSS/CSRF - Change Admin Password -= CSRF PoC 2 -...

Grafik CMS 1.1.2 - Multiple Cross-Site Request Forgery Vulnerabilities

Grafik CMS 1.1.2 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Mon 12 Jul 2010 07:07:22 PM EEST Vendor: http://www.grafik-power.com/grafikcms/ Download: None --- -= CSRF PoC 1 - Change Admin Password =- Grafik CMS 1.1.2 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF P...

Grafik CMS 1.1.2 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Mon 12 Jul 2010 07:07:22 PM EEST Vendor: http://www.grafik-power.com/grafikcms/ Download: None --- -= CSRF PoC 1 - Change Admin Password =- Grafik CMS 1.1.2 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create Admin User =- Grafik CMS 1.1.2 Multiple CSRF...

TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================= TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities ============================================= Date: Sun 11 Jul 2010 03:36:08 PM EEST Vendor: http://www.tomatocms.com/ Download: None --- -= CSRF PoC 1...

TomatoCart 1.0.1 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================== TomatoCart 1.0.1 Multiple CSRF Vulnerabilities ============================================== Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download:...

Orbis CMS v1.0.2 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================== Orbis CMS v1.0.2 Multiple CSRF Vulnerabilities ============================================== Date: Sun 11 Jul 2010 08:08:10 PM EEST Vendor: http://www.novo-ws.com/orbis-cms/ Download:...

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Sun 11 Jul 2010 08:08:10 PM EEST Vendor: http://www.novo-ws.com/orbis-cms/ Download: http://www.ohloh.net/p/orbis-cms/download?filename=orbis-1.0.2.zip --- -= CSRF PoC 1 - Change Admin Password =- Orbis CMS 1.0.2 Multiple...

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Sun 11 Jul 2010 08:08:10 PM EEST Vendor: http://www.novo-ws.com/orbis-cms/ Download: http://www.ohloh.net/p/orbis-cms/download?filename=orbis-1.0.2.zip --- -= CSRF PoC 1 - Change Admin Password =- Orbis CMS 1.0.2 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create...

TomatoCart 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download: http://www.tomatocart.com/component/extensionmanage/?task=downloadfiles&file=tomatocart-1.0.1.zip --- -= CSRF PoC 1 - Create Admin User =- TomatoCart 1.0.1 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF...

TomatoCMS 2.0.5 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Sun 11 Jul 2010 03:36:08 PM EEST Vendor: http://www.tomatocms.com/ Download: None --- -= CSRF PoC 1 - Change Administrator Password =- TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create Admin User =- TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities -...

[MajorSecurity SA-068]Anantasoft Gazelle CMS - change admin password via Cross-site Request Forgery

MajorSecurity SA-068Anantasoft Gazelle CMS - change admin password via Cross-site Request Forgery Details ======= Product: Anantasoft Gazelle CMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.anantasoft.com Vendor-Status: informed Advisory-Status: published Credits ============...

CVE-2009-4675: Improper Authentication

admin/admininfo/index.php in the Mole Group Gastro Portal Restaurant Directory Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission...

easyPortal 1.0.0 XSS / XSRF

----------------------------------------------------------------------------------------------- Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 02. January 2010. ----------------------------------------------------------------------------------------------- Application: easyPortal...

easyPortal v1.0.0 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ========================================== easyPortal v1.0.0 Multiple Vulnerabilities ========================================== ----------------------------------------------------------------------------------------------- Application:...

eazyPortal 1.0.0 - Multiple Vulnerabilities

eazyPortal 1.0.0 - Multiple Vulnerabilities ----------------------------------------------------------------------------------------------- Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 02. January 2010...

Ez News Manager / Pro XSRF

----------------------------------------------------------------------------------------------- Title: Ez News Manager / Pro - XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Mail Manager Pro Cross Site Request Forgery

----------------------------------------------------------------------------------------------- Title: Mail Manager Pro XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009. Application: Mail Manager Pro Version: the only one there is Link:...

Ez News Manager / Pro CSRF Change Admin Password

Exploit for unknown platform in category web applications ================================================ Ez News Manager / Pro CSRF Change Admin Password ================================================...