PHPFox 3.0.1 - ajax.php Remote Command Execution

PHPFox 3.0.1 - ajax.php Remote Command Execution ?php / ----------------------------------------------------------- phpFox = 3.0.1 ajax.php Remote Command Execution Exploit ----------------------------------------------------------- author.............: Egidio Romano aka EgiX mail...............:...

PHPFox 3.0.1 - 'ajax.php' Remote Command Execution

?php / ----------------------------------------------------------- phpFox = 3.0.1 ajax.php Remote Command Execution Exploit ----------------------------------------------------------- author.............: Egidio Romano aka EgiX mail...............: n0b0d13satgmaildotcom software link......:...

PHPFox Cross Site Scripting

Exploit Title: phpfox xss exploit Google Dork: inurl:powered by phpof Date: 25-02-2012 Author: tRipLeZiX Software Link: http://www.phpfox.com/ Version: allversion Tested on: http://www.tanaogi.com/marketplace/6/debot-was-here/ CVE : exploit xss code tHx to:...

CVE-2009-0969

Cross-site request forgery CSRF vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change the email address via the actupdate action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change the email address via the actupdate action...

CVE-2009-0969

Summary: CVE-2009-0969 is a cross-site request forgery (CSRF) vulnerability in phpFoX 1.6.21, affecting the file account/settings/account/index.php. The issue enables remote attackers to hijack administrator sessions to perform actions that change the administrator email address via the act[updat...

CVE-2009-0969

Cross-site request forgery CSRF vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change the email address via the actupdate action...

CVE-2009-0969: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change the email address via the actupdate action...

phpFoX 1.6.21 Cross Site Request Forgery

phpFoX Version 1.6.21 cross site request forgery exploit dork:Powered by phpFoX found by d14l greetz to:soul,marcoj,al0xyz,stefo,aljosha,sp1r1t,invisible greetz to all good people from my country croatia phpFoX Version 1.6.21 suffers from cross site request forgery which allows attacker to change...

phpFox XSS Injection

Exploit found by Maximize -- jjj.zkpber.pbz -- ------------------------------------------------------------------- Step1: When editing your profile, in the about me section put the following code img src="http://xss.xss/xss.jpg" z=' Step2: In the field under the About me section put the following...

CVE-2006-2631

phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfoxuser parameter...

Code injection

phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfoxuser parameter...

CVE-2006-2631

phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfoxuser parameter...

CVE-2006-2631

phpFoX is affected by an authentication-bypass like issue where remote authenticated users can modify arbitrary accounts by tampering with a NATIO cookie value, potentially the phpfox_user parameter. The root cause is a cookie handling flaw that allows escalation of privileges within authenticate...

CVE-2006-2631: Undefined Security Weakness

phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfoxuser parameter...

phpFoX.txt

phpFoX AllVersion Login to any Account Exploit found by Mx at hackmx.net Login as any user/admin/mod Action event only once This exploit will allow you to action an event per login, on any account in phpFoX All Versions. 1 Create an account on phpFox, after activating the account, login. 2 Go to...

phpFoX All Version Login Exploit

phpFoX AllVersion Login to any Account Exploit found by Mx at hackmx.net Login as any user/admin/mod Action event only once This exploit will allow you to action an event per login, on any account in phpFoX All Versions. 1 Create an account on phpFox, after activating the account, login. 2 Go to...

XSS in phpFoX Version 1.06

Advisory: XSS in phpFoX Version 1.06 Home Page: http://www.phpfox.com/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting http://www.arcticarmy.co.uk/user/?P=Daalvashi"scriptalert/script" http://www.arcticarmy.co.uk/user/?G=Cutiebubbleboo"scriptalert/script"...