doop CMS 1.4.0b - Cross-Site Request Forgery / Arbitrary File Upload

-------------------------------------------------------------------------- | Project: Doop document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello di amministrazione possiamo uppare qualsiasi file non controlla...

CVE-2008-5567: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/adsettings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...

CVE-2008-5565: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) Change Admin Password Exploit

Exploit for unknown platform in category web applications ===================================================================== LoveCMS 1.6.2 Final Simple Forum 3.1d Change Admin Password Exploit ===================================================================== 'en', 'forumWidth' = '500',...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password

LoveCMS 1.6.2 Final Simple Forum 3.1d - Change Admin Password 'en', 'forumWidth' = '500', 'forumAlign' = 'left', 'forumTitle' = 'Simple Forum', 'threadsPerPage' = '15', 'wordLength' = '50', 'autoDelete' = '12', 'adminPass' = $pass, 'allowHTML' = '1', 'allowURLs' = '1', 'allowUBBs' = '1',...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password

'en', 'forumWidth' = '500', 'forumAlign' = 'left', 'forumTitle' = 'Simple Forum', 'threadsPerPage' = '15', 'wordLength' = '50', 'autoDelete' = '12', 'adminPass' = $pass, 'allowHTML' = '1', 'allowURLs' = '1', 'allowUBBs' = '1', 'enableIDs' = '0', 'enableSignature' = '1', 'enableRefererCheck' = '0'...

UploadImageUploadScript 1.0 - Remote Change Admin Password

UploadImageUploadScript 1.0 - Remote Change Admin Password 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; re...

vigilecms-multi.txt

--------------------------------------------------------------------------------------- . .. | / || | / |/ \ / / | | \ \ | | \ / \ / \ / // \ /\ /| | |/ | | /| | \ | \ \ |\ / || // || /|| / / / / / ---------------------------------------------------------------------------------------...

Vigile CMS 1.4 - Multiple Vulnerabilities

Vigile CMS 1.4 - Multiple Vulnerabilities --------------------------------------------------------------------------------------- . .. | / || | / |/ \ / / | | \ \ | | \ / \ / \ / // \ /\ /| | |/ | | /| | \ | \ \ |\ / || // || /|| / / / / /...

Vigile CMS 1.4 - Multiple Vulnerabilities

--------------------------------------------------------------------------------------- . .. | / || | / |/ \ / / | | \ \ | | \ / \ / \ / // \ /\ /| | |/ | | /| | \ | \ \ |\ / || // || /|| / / / / / ---------------------------------------------------------------------------------------...

VigileCMS 1.4 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================= VigileCMS 1.4 Multiple Remote Vulnerabilities ============================================= --------------------------------------------------------------------------------------- . .. | / || |...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin password via 1 a certain HTML form that is posted automatically by JavaScript or 2 a news post...

psipuss 1.0 (editusers.php) Remote Change Admin Password Exploit

Exploit for unknown platform in category web applications ================================================================ psipuss 1.0 editusers.php Remote Change Admin Password Exploit ================================================================ ?php / '/ -.-...

psipuss 1.0 - 'editusers.php' Remote Change Admin Password

?php / '/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : psipuss version 1.0 ! Vendor : http://www.psi-labs.com/photosimagesuploadscript.html ! Author :...

Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit

No description provided by source. !/usr/bin/perl -w Remotely change the administrator password or password hash of Symantec Scan Engine. Author: Marc Bevand of Rapid7 marcbevandatrapid7.com Copyright 2006 Rapid7, LLC. All rights reserved. Redistribution and use in source and binary forms, with o...