Magnolia Development Group Multiple SQL-i/CSRF Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Kubelance CSRF (add new admin)

Exploit for php platform in category web applications Exploit Title: Kubelance CSRF add new admin Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/kubelance/21881/ Category:: webapps Demo : http://demos.kubelabs.com/kubelance/adm Greetz: Inj3ct0r Exploit DataBase...

almnzm 2.4 - Cross-Site Request Forgery (Add Admin)

almnzm 2.4 - Cross-Site Request Forgery Add Admin Title: almnzm 2.4 Priv8 Almnzm 2.4 CSRF Exploit!! Add New Admin :D By: HaNniBaL KsA HK www.r00t-s3c.com UserName: PassWord: E-mail: ! -- NOTE!: The value id'z for admin privileges can be cha...

Front Accounting 2.3.4 Cross Site Request Forgery

------------------------------------------------------------------------ --Description-- A cross-site request forgery vulnerability in Front Accounting 2.3.4 can be exploited to create a new admin. --PoC--...

GroupOffice 3.6.22 Cross Site Request Forgery

------------------------------------------------------------------------ --Description-- A cross-site request forgery vulnerability in GroupOffice 3.6.22 can be exploited to create a new admin. --PoC-- input type="hidden" name="modules"...

dotProject 2.1.5 - Cross-Site Request Forgery

dotProject 2.1.5 - Cross-Site Request Forgery Source: http://packetstormsecurity.org/files/view/98245/dotProject2.1.5-xsrf.txt input type="hidden" name="use...

chillyCMS 1.1.3 Cross Site Request Forgery

input type="hidden...

ATutor 2.0 Cross Site Request Forgery

input type="submit" name="submit" value="Sav...

Tomato Cart 1.0 Cross Site Request Forgery

img...

Sysax Multi Server Add Administrator

Assuming the server is running as admin the overflow can actually be used to execute arbitrary code. In our example we spawn an instance of cmd.exe and create a new admin, Billyboy, with a password of woot. This has been tested with Windows XP SP2. +-------- Start Exploit --------+ import paramik...

SugarCRM Community Edition 5.5.2 Cross Site Request Forgery

!--========================================================================================================= //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

AdaptCMS Lite 1.5 Cross Site Request Forgery

=========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download : http://sourceforge.net/projects/adaptcms/files/AdaptCMS%20Lite%20v1/1.5/AdaptCMSLite1.5.zip/download Advisory ...

NinkoBB 1.3RC4 Change Admin and Add New Admin CSRF Vulnerability

Exploit for unknown platform in category web applications ================================================================ NinkoBB 1.3RC4 Change Admin and Add New Admin CSRF Vulnerability ================================================================ change admin user,passwd & add new admin use...

NinkoBB 1.3RC4 Cross Site Request Forgery

change admin user,passwd & add new admin user exploit Author: ItSecTeam download from:http://ninkobb.com/releases/?NinkoBB-1.3RC4.zip script:NinkoBB 1.3RC4 update:2010 ----------------------------------------- xpl: coded by ahmadbady Admin Control Panel - Editing User Username Settings banned...

MULTIPLE SQL INJECTION VULNERABILITIES --S-CMS <= v-2.0 Beta3-->

----------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --S-CMS = v-2.0 Beta3-- ----------------------------------------------------------------- CMS INFORMATION: --WEB: http://www.matteoiammarrone.com/public/s-cms/ --DOWNLOAD:...

S-CMS <= 2.0b3 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== S-CMS WEB: http://www.matteoiammarrone.com/public/s-cms/ | |--DOWNLOAD: http://www.matteoiammarrone.com/public/s-cms/ | |--DEMO: N/A | |--CATEGORY: CMS / Portal | |--DESCRIPTION: Cms...

MaxCMS 2.0 Create New Admin

?php printr' +---------------------------------------------------------------------------+ maxcms2.0 creat new admin exploit by Securitylab.ir +---------------------------------------------------------------------------+ '; if $argc 3 printr'...

CzarNews &lt;= 1.20 (Cookie) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl ---------------------------------------------------------- CzarNews = v1.20 Cookie Remote SQL Injection Exploit Perl Exploit - Add a new admin with your credentials! Discovered On: 15/09/2008 Discovered By: StAkeR - StAkeRathotmaildotit...

CVE-2008-2488

admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...

CVE-2008-2488

admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...