Cerb 7.0.3 Cross Site Request Forgery Vulnerability

Cerb version 7.0.3 suffers from a cross site request forgery vulnerability. Product: Cerb Vendor: Webgroup Media LLC Vulnerable Versions: 7.0.3 and probably prior Tested Version: 7.0.3 Advisory Publication: August 12, 2015 without technical details Vendor Notification: August 12, 2015 Vendor Patc...

Watu PRO Play 1.9.2.1 Cross Site Scripting

Details ================ Software: Watu PRO Play Version: 1.9.2.1 Homepage: http://calendarscripts.info/watupro/modules.htmlplay Advisory report: https://security.dxw.com/advisories/stored-xss-in-watu-pro-play-allows-unauthenticated-attacker-to-do-almost-anything-an-admin-can/ CVE: Awaiting...

Watu PRO 4.8.8.4 Cross Site Scripting

Details ================ Software: Watu PRO Version: 4.8.8.4 Homepage: http://calendarscripts.info/watupro/ Advisory report: https://security.dxw.com/advisories/stored-xss-in-watu-pro-allows-unauthenticated-attackers-to-do-almost-anything-an-admin-can/ CVE: Awaiting assignment CVSS: 5.8 Medium;...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/adminusers.php...

Pligg CMS 2.0.2 CSRF漏洞

创建一个新文件，然后写入一个web后门，拿到webshell. 我们可以用另外一个方法也是可以用来getshell，先利用第一个漏洞编辑站点目录index.php，接着我们编辑保存下。 然后运保存成功后，查看index.php，然后就生成了test.php文件...

PT-2015-7043 · Siemens · Simatic S7-1200 Cpu

Name of the Vulnerable Software and Affected Versions: Siemens SIMATIC S7-1200 CPU devices with firmware prior to 4.1.3 Description: A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations: For firmware...

CVE-2015-5698

Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Jenkins 1.626 Code Execution / Cross Site Request Forgery

Title: Jenkins 1.626 - Cross Site Request Forgery / Code Execution Date: 27.08.15 Affected versions: = 1.626 current Vendor: jenkins-ci.org Contact: smash at devilteam.pl Cross site request forgery vulnerability in Jenkins 1.626 allows remote attackers to hjiack the authentication of users for mo...

ESA-2015-130: EMC Documentum WebTop and WebTop Clients Cross-Site Request Forgery Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-130: EMC Documentum WebTop and WebTop Clients Cross-Site Request Forgery Vulnerability EMC Identifier: ESA-2015-130 CVE Identifier: CVE-2015-4530 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected products: • EMC...

PHPfileNavigator v2.3.3 CSRF Add Arbitrary Users

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPFILENAVIGATOR0812a.txt Vendor: ================================ pfn.sourceforge.net Product: =================================== PHPfileNavigator v2.3.3 pfn Is...

CVE-2015-2983

CVE-2015-2983 concerns a Cross-Site Request Forgery (CSRF) in the admin.php script of PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone (versions 1.0.1 Free and earlier). The vulnerability allows an attacker to hijack the authentication of arbitrary users when they are logged in, by...

Vifi Radio 1 Shell Upload / CSRF

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Vifi Radio v1 - Arbitrary File Upload Vulnerability with CSRF My + Discovered by: KnocKout Contact : [email protected] HomePage :...

Pligg CMS 2.0.2 - Arbitrary Code Execution

Pligg CMS 2.0.2 - Arbitrary Code Execution Hacked '; Code You Can Customize Exploit For Your Self . Exploit : -- phpec...

Pligg CMS 2.0.2 - Arbitrary Code Execution Exploit

Exploit for php platform in category web applications Hacked '; Code You Can Customize Exploit For Your Self . Exploit : -- textarea type="hidden"id="textarea-1" name="pageconten...

Vifi Radio v1 - Arbitrary File Upload / CSRF Vulnerability

Exploit for php platform in category web applications . | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Vifi Radio v1 - Arbitrary File Upload Vulnerability with CSRF My + Discovered by: KnocKout...

Pligg CMS 2.0.2 - Arbitrary Code Execution

Hacked '; Code You Can Customize Exploit For Your Self . Exploit : -- phpecho ' Hacked '; /php /textare...

CVE-2015-5508

Cross-site request forgery CSRF vulnerability in the XC NCIP Provider module in the eXtensible Catalog XC Drupal Toolkit allows remote attackers to hijack the authentication of users with the "administer ncip providers" permission for requests that alter NCIP providers via a crafted request...

CVE-2015-6517

Cross-site request forgery CSRF vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to phpliteadmin.php...

CVE-2015-6517

CVE-2015-6517 describes a cross-site request forgery in phpLiteAdmin 1.1 that allows an attacker to hijack user authentication and issue requests to drop database tables via the droptable parameter to phpliteadmin.php. Affected software: phpLiteAdmin 1.1. The vulnerability arises from CSRF, enabl...

PHPfileNavigator 2.3.3 - Cross-Site Request Forgery

PHPfileNavigator 2.3.3 - Cross-Site Request Forgery + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPFILENAVIGATOR0812a.txt Vendor: ================================ pfn.sourceforge.net Product:...