48 matches found
CVE-2020-7988
An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any user/admin, to escalate privileges, and to gain access to more data and functionality. This issue exists due to the lack of a requirement to provide the old password, and the lac...
PT-2020-19900
Name of the Vulnerable Software and Affected Versions phpIPAM version 1.4 Description An issue was discovered in tools/pass-change/result.php, allowing CSRF to be used to change the password of any user or admin, escalate privileges, and gain access to more data and functionality. This issue exis...
CVE-2020-7988: Cross-Site Request Forgery (CSRF)
An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any user/admin, to escalate privileges, and to gain access to more data and functionality. This issue exists due to the lack of a requirement to provide the old password, and the lac...
AV Tutorial Script 1.0 - Remote User Pass Change Exploit
No description provided by source. ?php / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...
Enthrallweb eClassifieds 1.0 - Remote User Pass Change Exploit
No description provided by source. form action=target/myprofile.asp method=POST name=form2 p /p table align=center cellpadding=1 cellspacing=1 tr valign=baseline td align=right nowrap class=title Change Profile=Username input type=text name=MMrecordId value=ajann /td td input type=text...
aspWebLinks 2.0 - Remote SQL Injection / Admin Pass Change Exploit
No description provided by source. !-- Title : aspWebLinks 2.0 Remote Admin Pass Change Exploit and links.asp SQL Injection Author : ajann Dork : aspWebLinks 2.0 SQL INJECTION:...
Enthrallweb eCoupons 1.0 - (myprofile.asp) Remote Pass Change Exploit
No description provided by source. form action=target/myprofile.asp method=POST name=form2 p /p table align=center cellpadding=1 cellspacing=1 tr valign=baseline td align=right nowrap class=titlestrongfont face=Verdana, Arial, Helvetica, sans-serifPASSWORD:/font/strong/td Change Profile...
osCommerce 2.2 - Cross-Site Request Forgery
Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2 Tested on: Mac OS X 10.6.4, osCommerce v2.2 RC2A Dutch This is the code that you can execute to change the admin pass: -------crack.php------- Change Admin Pass...
AV Tutorial Script 1.0 - Remote User Pass Change
AV Tutorial Script 1.0 - Remote User Pass Change 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string...
snaps144-passwd.txt
126 $result.=" ."; else...
Snaps! Gallery 1.4.4 - Remote User Pass Change
Snaps! Gallery 1.4.4 - Remote User Pass Change ?php / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...
Snaps! Gallery 1.4.4 Remote User Pass Change Exploit
Exploit for unknown platform in category web applications ==================================================== Snaps! Gallery 1.4.4 Remote User Pass Change Exploit ==================================================== ?php / \|/// \ - - // @ @...
Extcalendar <= 2 (profile.php) Remote User Pass Change Exploit
No description provided by source. form name="userform" action="http://target/register.php" method="post" input name="step" type="hidden" value="regform" tr td class='tableh2' colspan='2'Account Information/td /tr tr td class='tableb' width='160'Username/td td class='tableb' /td /tr tr td...
Extcalendar 2 - profile.php Remote User Pass Change
Extcalendar 2 - profile.php Remote User Pass Change Account Information Username Password Confirm Password E-mail Address Other Details First Name Last Name Home page td class='t...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
No description provided by source. Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
Exploit for unknown platform in category web applications ================================================================== ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability ================================================================== Title : ACGVannu = 1.3 index2.php Remote...
ACGVannu 1.3 - 'index2.php' Remote User Pass Change
Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu 1.3 - index2.php Remote User Pass Change
ACGVannu 1.3 - index2.php Remote User Pass Change Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
No description provided by source. Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...