Tugux CMS 1.0_final Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerable Web-App : Tugux CMS 1.0final Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email : email protected Google-Dork : "Copyright 2010-2011 Tugux CMS" Tested on : Ubuntu 10.04 Web-App :...

N-13 News 4.0 - Cross-Site Request Forgery (Add Admin)

N-13 News 4.0 CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://n-13news.googlecode.com/files/n13news4.0.1.zip .:. Tested On Demo : http://network-13.com/news/ .:. Home :...

AIOCP 1.4.001 CSRF Vulnerability

Exploit for php platform in category web applications img...

PBBoard Version 2.0.5 Mullti Vulnerability

Exploit for unknown platform in category web applications ========================================== PBBoard Version 2.0.5 Mullti Vulnerability ========================================== ======================================================================================== | Title : PBBoard...

TimeClock Cross Site Request Forgery

============================================================================== » Note : Tribute to the martyrs of Gaza . ============================================================================== » TimeClock Remote Add Admin Exploit...

CVE-2009-1771

index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, which allows remote attackers to create or modify admin accounts via the 1 usersfullname, 2 usersemail, 3 usersroleid, 4 usersusername, and 5 userspassword parameters...

calendars-bypass.txt

Exploit discovered by SecVuln from http://secvuln.com Come join our clan! contact [email protected] Author == SecVuln Version == 4.02 Software == Calendars for the web by great hill corporation Calendars for the web has a vulnerability in the administration page. The page saves the past session...

zomplog-admin.txt

======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm password" -------------------------------------------------------------...

Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit

No description provided by source. KAPDA - Security Science Researchers Institute Advisory : http://www.kapda.ir/advisory-337.html Vendor : http://www.nukedit.com/ What is : Nukedit is a Free Content Management Vulnerability : Unauthorized Admin Add Exploit if "register.asp" be enable! Discovered...

Nukedit 4.9.6 - Unauthorized Admin Add

Nukedit 4.9.6 - Unauthorized Admin Add KAPDA - Security Science Researchers Institute Advisory : http://www.kapda.ir/advisory-337.html Vendor : http://www.nukedit.com/ What is : Nukedit is a Free Content Management Vulnerability : Unauthorized Admin Add Exploit if "register.asp" be enable!...

Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit

Exploit for unknown platform in category web applications =================================================== Nukedit CMS Kapda HTML PoC For Nukedit Kapda HTML PoC For Nukedit Discovered and coded by 3nitro - farhadkey AT kapda dot ir Change the form's action in source :...

Nukedit 4.9.6 - Unauthorized Admin Add

KAPDA - Security Science Researchers Institute Advisory : http://www.kapda.ir/advisory-337.html Vendor : http://www.nukedit.com/ What is : Nukedit is a Free Content Management Vulnerability : Unauthorized Admin Add Exploit if "register.asp" be enable! Discovered : 3nitro - farhadkey AT kapda d0t ...

JirosBanner.txt

--Security Report-- Advisory: Jiros Banner Experience Pro Remote Privilege Escalation. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 07/03/06 04:52 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Jiros http://www.jiros.net...

JiRos Banner Experience 1.0 - Unauthorized Create Admin

JiRos Banner Experience 1.0 - Unauthorized Create Admin Jiros Banner Experience Pro Unauthorized Admin Add Exploit .xpl font-family:tahoma; font-size:11px; text-decoration: none; function jbxpl if document.xplt.victim.value=="" alert"Please enter site!"; return false; if confirm"Are you sure?"...

JiRos Banner Experience 1.0 (Create Admin Bypass) Remote Exploit

No description provided by source. html titleJiros Banner Experience Pro Unauthorized Admin Add Exploit/title body bgcolor="000000" style .xpl font-family:tahoma; font-size:11px; text-decoration: none; /style script language="JavaScript" function jbxpl if document.xplt.victim.value=="" alert"Plea...

JiRos Banner Experience 1.0 (Create Admin Bypass) Remote Exploit

Exploit for unknown platform in category web applications ================================================================ JiRos Banner Experience 1.0 Create Admin Bypass Remote Exploit ================================================================ Jiros Banner Experience Pro Unauthorized Admin...

JiRos Banner Experience 1.0 - Unauthorized Create Admin

Jiros Banner Experience Pro Unauthorized Admin Add Exploit .xpl font-family:tahoma; font-size:11px; text-decoration: none; function jbxpl if document.xplt.victim.value=="" alert"Please enter site!"; return false; if confirm"Are you sure?"...

JBrowser 1.0/2.x - Unauthorized Admin Access

source: https://www.securityfocus.com/bid/9537/info Due to a lack of access validation to the 'admin' directory, malevolent users may be able to execute arbitrary admin scripts. This may allow a malicious user to upload arbitrary files to the affected system and gain access to files outside of th...

Beanwebb's Guestbook 1.0 Multiple Vulnerabilities

The remote host is running Beanwebb's Guestbook. This set of CGIs has two vulnerabilities : - Anyone can access the admin page admin.php - It is vulnerable to cross-site scripting attacks in add.php An attacker may use these flaws to steal the cookies of your users or to inject fake information i...

CVE-2002-0096

The CVE-2002-0096 entry concerns Geeklog 1.3. The installation process creates an extra group_assignments record that is not deleted, causing the first newly created user to be added to the GroupAdmin and UserAdmin groups and potentially receive unintended administrative privileges. Connected sou...