ezAPPAREL Cross Site Request Forgery

==================================================== ezAPPAREL Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

osCommerce 2.2rc2a Cross Site Request Forgery

==================================================== oscommerce 2.2rc2a Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

WordPress Plugin Firestats - Remote Configuration File Download

WordPress Plugin Firestats - Remote Configuration File Download Exploit Title: Wordpress firestats remote configuration file download Date: 2010-07-09 Author: Jelmer de Hen Software Link: http://firestats.cc/ Version: 1.6.5 Tested on: PHP Do a simple GET request to this file:...

ActiveCollab 2.3.0 Directory Traversal / Local File Inclusion

============================================================ PAINSEC SECURITY RESEARCH GROUP SECURITY ADVISORY 2010-001 - Original release date: June 24th, 2010 - Discovered by: Jose Carlos de Arriba dade at painsec dot com - Severity: 10/10 Base CVSS Score...

ActiveCollab 2.3.0 - Local File Inclusion Directory Traversal

ActiveCollab 2.3.0 - Local File Inclusion Directory Traversal ============================================================ PAINSEC SECURITY RESEARCH GROUP SECURITY ADVISORY 2010-001 - Original release date: June 24th, 2010 - Discovered by: Jose Carlos de Arriba dade at painsec dot com - Severity:...

ActiveCollab 2.3.0 - Local File Inclusion / Directory Traversal

============================================================ PAINSEC SECURITY RESEARCH GROUP SECURITY ADVISORY 2010-001 - Original release date: June 24th, 2010 - Discovered by: Jose Carlos de Arriba dade at painsec dot com - Severity: 10/10 Base CVSS Score...

SA-CONTRIB-2010-047: Services - Access Bypass

The Services module allows users to expose Drupal functionality to remote users. Services provides the ability for developers to define access callbacks in code for exposed services. When using session ID authentication without API key authentication, the module does not properly check access whe...

Administrador de Contenidos Admin Login Bypass vulnerability

Exploit for asp platform in category web applications ============================================================ Administrador de Contenidos Admin Login Bypass vulnerability ============================================================ Administrador de Contenidos Admin Login Bypass vulnerability...

Administrador de Contenidos - Admin Authentication Bypass

Administrador de Contenidos Admin Login Bypass vulnerability Prodcut: Administrador de Contenidos Home : www.DZ4All.cOm/Cc Vunlerability : Admin Bypass Risk : High Dork : "Diseño Web Hernest Consulting S.L." Discovred by: Ra3cH From : Algeria Contact : [email protected] Greetz to : ALLAH All Members...

Clicksor - SQL Injection

ALLH AKBAR Exploit Title: Clicksor SQL Injecti0n Vulnerability -::DESCRIPTION Date: 4 de mayo de 2010 -::DATE Author: JM511 EmaiL : [email protected] , [email protected] -::AUTHOR From :\ Saudi Arabia , Greetz to: GoLdeN-Z3r0 , Dr.Exe , Sec-q8 , Shi5 aL Hacker , SaFa7 al3nzee , BlacK DeaTh Home :...

Canvas Tag Denial Of Service

"; while 1 echo ""; echo ""; echo ""; ?...

Safari 4.0.5 and Internet Explorer 6.0 / 8.0 Denial of Service

Exploit for windows platform in category dos / poc ============================================================== Safari 4.0.5 and Internet Explorer 6.0 / 8.0 Denial of Service ============================================================== "; while 1 echo ""; echo ""; echo ""; ? 0day.today...

Canvas tag DoS - Multiple Browsers

Exploit for multiple platform in category dos / poc ================================== Canvas tag DoS - Multiple Browsers ================================== "; while 1 echo ""; echo ""; echo ""; ? 0day.today 2018-04-11...

Boutique SudBox 1.2 Changer Login et Mot de Passe CSRF Vulnerability

Exploit for php platform in category web applications ==================================================================== Boutique SudBox 1.2 Changer Login et Mot de Passe CSRF Vulnerability ====================================================================...

Haciendo amigos

Sostenga el cursor encima de Amigos y dé clic en Encontrar Amigos y obtendrá esta página, excepto que tendrá otras imágenes. Estos son los amigos de sus amigos. Usted puede decidir si preguntarle a estas personas si desean ser sus amigos dando clic en “Agregar como amigo” o X para eliminarlos de ...

Privacidad

Dé clic en su nombre, después dé clic en Editar perfil. Note que mi cumpleaños es el 1ro de enero. No hay razón para que Facebook sepa mi verdadero cumpleaños. Facebook necesita saber el año en que usted nació para “establecer” que tiene 18 años. Por lo tanto, eso es lo único que necesita...

Tan pronto como inicie la sesión

Una vez que su cuenta haya sido creada, inmediatamente dé clic en “Configuraciones” y obtendrá esta página. Note que la dirección de correo electrónico es una que creé para registrarme en cuentas “de juego” en línea. La he separado de mi cuenta de correo electrónico normal. Si pierdo alguna de mi...

68kb Knowledge Base v1.0.0rc3 edit main settings CSRF

Exploit for php platform in category web applications ===================================================== 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF ===================================================== Exploit Title: 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF Date:...

68KB Knowledge Base Script 1.0.0rc2 - Search SQL Injection

68KB Knowledge Base Script 1.0.0rc2 - Search SQL Injection Exploit Title: 68kb SQLI Date: 2010-03-28 Author: Jelmer de Hen Software Link: http://68kb.googlecode.com/files/68kb-v1.0.0rc2.zip Version: v1.0.0rc2 Go to /search and search for:...

68KB Knowledge Base Script 1.0.0rc2 - Search SQL Injection

Exploit Title: 68kb SQLI Date: 2010-03-28 Author: Jelmer de Hen Software Link: http://68kb.googlecode.com/files/68kb-v1.0.0rc2.zip Version: v1.0.0rc2 Go to /search and search for: %'//UNION//ALL//SELECT//1,2,user,4,5,6,7,8,9,10,11,12,13,14,15 Don't use spaces in the injection because they change...