32 matches found
EUVD-2008-3107
Malware in sbrugna...
EUVD-2008-6689
Malware in sbrugna...
EUVD-2008-3108
Malware in sbrugna...
PHPmotion <= 2.0 (update_profile.php) Remote Shell Upload Exploit
No description provided by source. ?php / ----------------------------------------------------------------- PHPmotion = 2.0 updateprofile.php Remote Shell Upload Exploit ----------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
PHPmotion <= 2.1 CSRF Vulnerability
No description provided by source. PHPmotion = 2.1 CSRF vulnerability Author: Ausome1 Email: [email protected] Website: http://www.enigmagroup.org Description: Change a member's password and/or email...
phpmotion 0day. IE FCKeditor upload vulnerability-vulnerability warning-the black bar safety net
Since the phpmotion app uses the FCKeditor, and not on the test. html page to be deleted, causing the file upload vulnerability. Exploit : http://www.xxxx.com/phpmotion/fckeditor/editor/filemanager/connectors/test.html Upload webshell; and shell address: http://www.xxxx.com/userfiles/webshell...
PHPMotion FCKeditor File Upload Vulnerability
No description provided by source. ----------------------------------------------------------------------- phpmotion/FCKeditor File upload vulnerabilities ----------------------------------------------------------------------- Author : trycyber [email protected] Homepage :...
PHPMotion FCKeditor File Upload Vulnerability
Exploit for php platform in category web applications ============================================= PHPMotion FCKeditor File Upload Vulnerability ============================================= Author : trycyber email protected Homepage : http://indonesiancoder.com,magelangcyber.web.id Vendor :...
PHPMotion 1.62 FCKeditor Shell Upload
----------------------------------------------------------------------- phpmotion/FCKeditor File upload vulnerabilities ----------------------------------------------------------------------- Author : trycyber [email protected] Homepage : http://indonesiancoder.com,magelangcyber.web.id...
PHPmotion 1.62 - 'FCKeditor' Arbitrary File Upload
----------------------------------------------------------------------- phpmotion/FCKeditor File upload vulnerabilities ----------------------------------------------------------------------- Author : trycyber [email protected] Homepage : http://indonesiancoder.com,magelangcyber.web.id...
PHPmotion 1.62 - FCKeditor Arbitrary File Upload
PHPmotion 1.62 - FCKeditor Arbitrary File Upload ----------------------------------------------------------------------- phpmotion/FCKeditor File upload vulnerabilities ----------------------------------------------------------------------- Author : trycyber [email protected] Homepage :...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the 1 password or 2 emailaddress parameter...
CVE-2008-6729
Multiple cross-site request forgery CSRF vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the 1 password or 2 emailaddress parameter...
CVE-2008-6729
PHPmotion
PHPmotion 2.1 Cross Site Request Forgery
PHPmotion Source of pwned.html file: Once your victim has visited your evil page, You may now be able to log...
PHPmotion <= 2.1 CSRF Vulnerability
No description provided by source. PHPmotion = 2.1 CSRF vulnerability Author: Ausome1 Email: [email protected] Website: http://www.enigmagroup.org Description: Change a member's password and/or email...
PHPmotion 2.1 - Cross-Site Request Forgery
PHPmotion Source of pwned.html file: Once your victim has visited your evil page, You may now be able to log into their PHPMotion account, using password "password123" an...
PHPmotion 2.1 - Cross-Site Request Forgery
PHPmotion 2.1 - Cross-Site Request Forgery PHPmotion Source of pwned.html file: Once your victim has visited your evil page, You may now be able to log into their PHP...
PHPmotion <= 2.1 CSRF Vulnerability
Exploit for unknown platform in category web applications =================================== PHPmotion Source of pwned.html file: input type="submit" value="Update settings"...
CVE-2008-3117
Unrestricted file upload vulnerability in updateprofile.php in PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file with a content type of 1 image/gif, 2 image/jpeg, or 3 image/pjpeg, then accessing it via a direct request to the file unde...