Food Order Portal 8.3 Cross Site Request Forgery

Food Order Portal 8.3 - CSRF Remote Admin Delete PoC My + Author : KnocKout Contactonlymail : [email protected] HomePage : http://Cyber-Warrior.Org - http://h4x0resec.blogspot.com Greetz: DaiMon,furty,BackDoor,EthicalHacker,BARCOD3,SZE©,VolqaN,Septemb0x | Unuttuklarýmýz affola.. Turkey...

DEBIAN-CVE-2014-5240

Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...

CVE-2014-5240

Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...

NETGEAR Wireless Cable Modem Gateway Auth Bypass and CSRF

No description provided by source. Sense of Security - Security Advisory - SOS-11-011 Release Date. 20-Sep-2011 Last Update. - Vendor Notification Date. 22-Mar-2011 Product. NETGEAR Wireless Cable Modem Gateway CG814WG Affected versions. Hardware 1.03, Software V3.9.26 R14 verified, possibly othe...

N-13 News 3.4 - Remote Admin Add CSRF Exploit

No description provided by source. ======================================================== N-13 News 3.4 Remote Admin Add CSRF Exploit ======================================================== Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom...

eFiction < 2.0.7 - Remote Admin Authentication Bypass Vulnerability

No description provided by source. eFiction vulnerability I am releasing this to the public. Vendor was notified. Someone is also illegally defacing these websites under MY name, which is a shame because they ripped it from a private discussion on g00ns.net. This proof of concept is not to be use...

DA Mailing List System 2 - Multiple Vulnerabilities

No description provided by source. DA Mailing List System V2 Remote Admin Login Exploit Author : Phenom Dork: DA Mailing List System V2 Powered by DigitalArakan.Net Version : 2 Exploit : 1- http://server/path/admincp.asp 2- login with admin as user name and 'or' as pas...

statcountex 3.1 - Multiple Vulnerabilities

No description provided by source. Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34 Version: 3.1 Tested on: Windows xp sp3 ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ / /| ' \ | | | | | | / | | | | | | | | | || || ||||...

Metyus Okul Yonetim 1.0 Sistemi Uye_giris_islem.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21418/info Metyus Okul Yonetim Sistemi is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Web@all <= 1.1 - Remote Admin Settings Change

No description provided by source. =========================================== Web@all = 1.1 Remote Admin Settings Change =========================================== Author: giudinvx Email: giudinvxatgmaildotcom Date: 27/12/2010 Site: http://www.giudinvx.altervista.org/...

Advanced Poll <= 2.0.5-dev Remote Admin Session Generator Exploit

No description provided by source. !/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile admin session gen. 0day! KEEP IT PRIVATE 0day! date: 30/07/06 diwou [email protected] PHCKSEC c 2001-2006. see templates for code execution ;. use strict; use warnings; use LWP::UserAgent; use MD5; my...

PHP-Nuke 6.x/7.0/7.1 Image Tag Admin Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9895/info It has been reported that PHP-Nuke is prone to a remote admin command execution vulnerability. This issue is due to a design error that allows an attacker to specify arbitrary URI values in bbCode tags contained...

NatterChat 1.1 - Remote Admin Bypass Vulnerability

No description provided by source. ============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover: Mountassif Moad =...

creative guestbook 1.0 - Multiple Vulnerabilities

No description provided by source. .--. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8|-\IIIIII/-| / \ / @ +Iranian Are The Best In World+ Portal : Creative Guestbook 1.0 Download : http://www.thecreativeheads.de/CreativeFiles/downloads.php Author : Dj7xpl | [email protected]...

Emek Portal 2.1 Uyegiris.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20378/info Emek Portal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

TinyPHP Forum <= 3.6 (makeadmin) Remote Admin Maker Exploit

No description provided by source. TinyPHPForum 3.6 Admin Makerbr By SirDarckCat from elhacker.net FORM method=post enctype=multipart/form-data Existing User:INPUT name=unamebr INPUT type=file name=userfile style=visibility:HIDDENbr INPUT type=hidden name=email [email protected] input type=hidden...

DEBIAN-CVE-2014-1685

The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the media of arbitrary users via unspecified vectors...

Satellite: Interface to create the initial administrator user remains open after installation

Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts...

vBulletin 4.1.x - installupgrade.php Security Bypass

vBulletin 4.1.x - installupgrade.php Security Bypass source: https://www.securityfocus.com/bid/62909/info vBulletin is prone to a security-bypass vulnerability. Successful exploits can allow attackers to bypass certain security restrictions and perform unauthorized actions. !/usr/bin/perl Title:...

vBulletin 4.1.x - '/install/upgrade.php' Security Bypass

source: https://www.securityfocus.com/bid/62909/info vBulletin is prone to a security-bypass vulnerability. Successful exploits can allow attackers to bypass certain security restrictions and perform unauthorized actions. !/usr/bin/perl Title: vBulletin remote admin injection exploit Author: Simo...