Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action...

CVE-2012-5326

Cross-site request forgery CSRF vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action...

CVE-2012-5326

CVE-2012-5326 affects IDevSpot iSupport 1.x. The vulnerability is a CSRF in admin/function.php that allows remote attackers to hijack administrator authentication to perform actions that add administrator accounts. The connected documents provide the same description and do not specify exploitati...

iSupport 1.8 CSRF Vulnerability (Add Admin)

Exploit for php platform in category web applications iSupport 1.8 CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.idevspot.com/ .:. Tested On Demo :...

iSupport 1.x - Cross-Site Request Forgery HTML Code Injection (Add Admin)

iSupport 1.x - Cross-Site Request Forgery HTML Code Injection Add Admin !/usr/bin/perl Title : iSupport v1.x = Html Code injection to add admin Author : Or4nG.M4n Version : 1.x Homepage : http://www.idevspot.com/iSupport.php Google Dork: "Powered by iSupport 1.8 " Homepage :...

iSupport 1.x Cross Site Request Forgery

!/usr/bin/perl Title : iSupport v1.x = Html Code injection to add admin Author : Or4nG.M4n Version : 1.x Homepage : http://www.idevspot.com/iSupport.php Google Dork: "Powered by iSupport 1.8 " Homepage : http://www.idevspot.com/ Thnks : +----------------------------------+ | xSs m4n i-Hmx h311 c0...

iSupport 1.x - Cross-Site Request Forgery / HTML Code Injection (Add Admin)

!/usr/bin/perl Title : iSupport v1.x = Html Code injection to add admin Author : Or4nG.M4n Version : 1.x Homepage : http://www.idevspot.com/iSupport.php Google Dork: "Powered by iSupport 1.8 " Homepage : http://www.idevspot.com/ Thnks : +----------------------------------+ | xSs m4n i-Hmx h311 c0...

iSupport 1.8 SQL Injection

iSupport 1.8 SQL Injection Vulnerability Date: 2011-06-23 Author: Brendan Coles / / Advisory: http://itsecuritysolutions.org/2011-06-23-iSupport-1.8-SQL-Injection-Vulnerability/ Software: iSupport Version: = 1.8 Homepage: http://www.idevspot.com/iSupport.php Google Dork: "Powered by iSupport 1.8 ...

iSupport 1.8 - SQL Injection

iSupport 1.8 - SQL Injection iSupport 1.8 SQL Injection Vulnerability Date: 2011-06-23 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-06-23-iSupport-1.8-SQL-Injection-Vulnerability/ Software: iSupport Version: = 1.8 Homepage: http://www.idevspot.com/iSupport.php Google Dork:...

iSupport 1.8 SQL Injection Vulnerability

Exploit for php platform in category web applications Date: 2011-06-23 Author: Brendan Coles email protected Software: iSupport Version: = 1.8 Homepage: http://www.idevspot.com/iSupport.php Google Dork: "Powered by iSupport 1.8 " Vendor: idevSpot Homepage: http://www.idevspot.com/ Notified:...

iSupport 1.8 - SQL Injection

iSupport 1.8 SQL Injection Vulnerability Date: 2011-06-23 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-06-23-iSupport-1.8-SQL-Injection-Vulnerability/ Software: iSupport Version: = 1.8 Homepage: http://www.idevspot.com/iSupport.php Google Dork: "Powered by iSupport 1.8 "...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the a 5 or b 9 field in a post action to ticketfunction.php, reachable through ticketsubmit.php and index.php; c the which parameter to...

CVE-2009-4433

Multiple cross-site scripting XSS vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the a 5 or b 9 field in a post action to ticketfunction.php, reachable through ticketsubmit.php and index.php; c the which parameter to...

Directory traversal

Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the includefile parameter...

CVE-2009-4434

CVE-2009-4434 affects IDevSpot iSupport 1.8 and earlier. A directory traversal flaw in index.php allows remote attackers to read arbitrary files via .. in the include_file parameter. NVD lists CVSSv2 base score 5.0 (Medium), network vector, low attack complexity, no authentication, partial confid...

CVE-2009-4433

CVE-2009-4433 affects IDevSpot iSupport 1.8 and earlier. The XSS flaws enable remote injection via: (a) the 5 or (b) 9 field in post to ticket_function.php, reachable via ticket_submit.php and index.php; (c) the which parameter to function.php; or (d) the which parameter to index.php, related to ...

CVE-2009-4434

Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the includefile parameter...

CVE-2009-4433

Multiple cross-site scripting XSS vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the a 5 or b 9 field in a post action to ticketfunction.php, reachable through ticketsubmit.php and index.php; c the which parameter to...

iSupport 1.8 - Cross-Site Scripting Local File Inclusion

iSupport 1.8 - Cross-Site Scripting Local File Inclusion --------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...

iSupport 1.8 - ticket_function.php Multiple Cross-Site Scripting Vulnerabilities

iSupport 1.8 - ticketfunction.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37380/info iDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker m...