CVE-2008-0575

Cross-site request forgery CSRF vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmin privilege level to arbitrary accounts as administrators via an "update member" action...

Webspell 4.01.02 2 Vulnerabilites

Webspell 4.01.02 2 Vulnerabilites Founded by NBBN Vendor: http://cms.webspell.org 1 Cross-Site Scripting Vulnerability 2 Change User Permission XSRF Vulnerability 1 http://site.tld/path/index.php?site=whoisonline&sort="xss code 2 This creates a superadmin account, when an admin click a link, to a...

VigileCMS 1.8 - Stealth Remote Command Execution

VigileCMS 1.8 - Stealth Remote Command Execution !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit...

VigileCMS 1.8 - Stealth Remote Command Execution

!/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit. 22/11/2007 dd-mm-yyyy...

[Full-disclosure] Teamspeak Server 2.0.20.1 Vulnerabilities

Hi everyone, several months ago I discovered some vulnerabilities in TeamSpeak Server WebAdmin interface. I sent the advisory and exploit to the developers about two months ago 11 03 2007, but the server is still vulnerable, today. Affected software: Teamspeak Server 2.0.20.1 Looks like the beta...

CVE-2006-5737

PunBB uses a predictable cookieseed value that can be derived from the time of registration of the superadmin account installation time, which might allow local users to perform unauthorized actions...

[waraxe-2004-SA#018 - Admin-level authentication bypass in phpnuke 6.x-7.2]

================================================================================ waraxe-2004-SA018 ================================================================================ Admin-level authentication bypass in phpnuke 6.x-7.2...

[waraxe-2004-SA#008 - easy way to get superadmin rights in PhpNuke 6.x-7.1.0]

================================================================================ waraxe-2004-SA008 ================================================================================ waraxe-2004-SA008 - easy way to get superadmin rights in PhpNuke 6.x-7.1.0...

waraxe-2004-SA004.txt

================================================================================ waraxe-2004-SA004 ================================================================================ Multiple vulnerabilities in XMB 1.8 Partagium Final SP2...

[waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2

================================================================================ waraxe-2004-SA004 ================================================================================ Multiple vulnerabilities in XMB 1.8 Partagium Final SP2...