2505 matches found
vBulletin 3.8.6 Credential Disclosure
Versions Affected: 3.8.6 Only! Info: Content publishing, search, security, and morevBulletin has it all. Whether its available features, support, or ease-of-use, vBulletin offers the most for your money. Learn more about what makes vBulletin the choice for people who are serious about creating...
eXtreme Message Board 1.9.11 - Multiple Cross-Site Request Forgery Vulnerabilities
eXtreme Message Board 1.9.11 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Thu 15 Jul 2010 12:08:07 PM EEST Vendor: http://www.xmbforum.com/ Download: http://www.xmbforum.com/download/XMB-1.9.11.09.zip --- -= CSRF PoC 1 - Change Admin Password =- -= Method 1 - editprofile.php =-...
eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities
Exploit for php platform in category web applications ========================================================== eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities ========================================================== The vulnerable application can be downloaded from:...
eXtreme Message Board 1.9.11 - Multiple Cross-Site Request Forgery Vulnerabilities
Date: Thu 15 Jul 2010 12:08:07 PM EEST Vendor: http://www.xmbforum.com/ Download: http://www.xmbforum.com/download/XMB-1.9.11.09.zip --- -= CSRF PoC 1 - Change Admin Password =- -= Method 1 - editprofile.php =- eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities - Change Admin Password -=...
Microsoft Windows automatically executes code specified in shortcut files
Overview Microsoft Windows automatically executes code specified in shortcut LNK and PIF files. Description Microsoft Windows supports the use of shortcut or LNK files. A LNK file is a reference to a local file. A PIF file is a shortcut to a MS-DOS application. Clicking on a LNK or PIF file has...
TornadoStore 1.4.3 SQL Injection
Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple SQL Injection in TornadoStore 1.4.3 1. Advisory Information Title: Multiple SQL Injection in TornadoStore 1.4.3 Advisory ID: BONSAI-2010-0106 Advisory URL:...
PHPDirector 0.30 SQL Injection
====================================================================== PHPDirector 0.30 videos.php SQL Injection Vulnerability ====================================================================== Date : 29/06/2010 Author : Mr-AbdoX Emails : [email protected] & [email protected] My web Sites :...
PHPDirector 0.30 - videos.php SQL Injection
PHPDirector 0.30 - videos.php SQL Injection ====================================================================== PHPDirector 0.30 videos.php SQL Injection Vulnerability ====================================================================== Date : 29/06/2010 Author : Mr-AbdoX Emails :...
PHPDirector 0.30 (videos.php) SQL Injection Vulnerability
No description provided by source. ====================================================================== PHPDirector 0.30 videos.php SQL Injection Vulnerability ====================================================================== Date : 29/06/2010 Author : Mr-AbdoX Emails : [email protected] &...
PHPDirector 0.30 - 'videos.php' SQL Injection
====================================================================== PHPDirector 0.30 videos.php SQL Injection Vulnerability ====================================================================== Date : 29/06/2010 Author : Mr-AbdoX Emails : [email protected] & [email protected] My web Sites :...
Smart ASP Survey SQL & XSS Vulnerability
Exploit for asp platform in category web applications ======================================== Smart ASP Survey SQL & XSS Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...
CMS control panel v2.0 Edit File Vulnerability
Exploit for php platform in category web applications ============================================== CMS control panel v2.0 Edit File Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /...
Wordpress (install.php) Any Version
Exploit for php platform in category web applications =================================== Wordpress install.php Any Version =================================== + : Author : ThE DarK + : e-Mail : email protected + : Sites : Arab-Hack.net , Sa-Hacker.Com , Gaza-Hack.net , error-y.com + : Software...
PHP car rental complete System V1.2 SQL Injection Vulnerability
Exploit for php platform in category web applications =============================================================== PHP car rental complete System V1.2 SQL Injection Vulnerability =============================================================== Title:PHP car rental complete System V1.2 SQli...
Patient folder (THEME ASP) - SQL Injection
Patient folder THEME ASP - SQL Injection ============================================================ Patient folder THEME ASP Local SQL Injection Vulnerability ============================================================ ----------------------------------- By: SA H4x0r - Emails: [email protected] ...
e-webtech - page.asp SQL Injection
e-webtech - page.asp SQL Injection ------------------------------------------------------------------------------------------- e-webtech page.asp SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail:...
e-webtech - new.asp?id SQL Injection
e-webtech - new.asp?id SQL Injection new.asp?id= SQL Injection Vulnerability Home: http://www.dz4all.com/cc | http://www.h4ckforu.com/vb Risk: high Title: new.asp?id= SQL Injection Vulnerability Dork: "Powerd by www.e-webtech.com" Discovred by: protocol From : algeria Contact : [email protected] Greet ...
e-webtech - 'new.asp?id=' SQL Injection
new.asp?id= SQL Injection Vulnerability Home: http://www.dz4all.com/cc | http://www.h4ckforu.com/vb Risk: high Title: new.asp?id= SQL Injection Vulnerability Dork: "Powerd by www.e-webtech.com" Discovred by: protocol From : algeria Contact : [email protected] Greet to : All Members of...
e-webtech (new.asp) SQL Injection Vulnerability
Exploit for asp platform in category web applications =================================================== e-webtech new.asp?id= SQL Injection Vulnerability =================================================== new.asp?id= SQL Injection Vulnerability Home: http://www.dz4all.com/cc |...
Comersus 8 Shopping Cart Cross Site Request Forgery / SQL Injection
Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart Version: Web Application vendor :http://www.comersus.com/index.html Date: 1 apr,2010 Author:Sid3^effects Code : -------------------------------------------------------------------------------------- Sid3^effects aKa Ha...