CVE-2009-1771

index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, which allows remote attackers to create or modify admin accounts via the 1 usersfullname, 2 usersemail, 3 usersroleid, 4 usersusername, and 5 userspassword parameters...

calendars-bypass.txt

Exploit discovered by SecVuln from http://secvuln.com Come join our clan! contact [email protected] Author == SecVuln Version == 4.02 Software == Calendars for the web by great hill corporation Calendars for the web has a vulnerability in the administration page. The page saves the past session...

zomplog-admin.txt

======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm password" -------------------------------------------------------------...

Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit

No description provided by source. KAPDA - Security Science Researchers Institute Advisory : http://www.kapda.ir/advisory-337.html Vendor : http://www.nukedit.com/ What is : Nukedit is a Free Content Management Vulnerability : Unauthorized Admin Add Exploit if "register.asp" be enable! Discovered...

Nukedit 4.9.6 - Unauthorized Admin Add

KAPDA - Security Science Researchers Institute Advisory : http://www.kapda.ir/advisory-337.html Vendor : http://www.nukedit.com/ What is : Nukedit is a Free Content Management Vulnerability : Unauthorized Admin Add Exploit if "register.asp" be enable! Discovered : 3nitro - farhadkey AT kapda d0t ...

Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit

Exploit for unknown platform in category web applications =================================================== Nukedit CMS Kapda HTML PoC For Nukedit Kapda HTML PoC For Nukedit Discovered and coded by 3nitro - farhadkey AT kapda dot ir Change the form's action in source :...

Nukedit 4.9.6 - Unauthorized Admin Add

Nukedit 4.9.6 - Unauthorized Admin Add KAPDA - Security Science Researchers Institute Advisory : http://www.kapda.ir/advisory-337.html Vendor : http://www.nukedit.com/ What is : Nukedit is a Free Content Management Vulnerability : Unauthorized Admin Add Exploit if "register.asp" be enable!...

JirosBanner.txt

--Security Report-- Advisory: Jiros Banner Experience Pro Remote Privilege Escalation. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 07/03/06 04:52 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Jiros http://www.jiros.net...

JiRos Banner Experience 1.0 - Unauthorized Create Admin

JiRos Banner Experience 1.0 - Unauthorized Create Admin Jiros Banner Experience Pro Unauthorized Admin Add Exploit .xpl font-family:tahoma; font-size:11px; text-decoration: none; function jbxpl if document.xplt.victim.value=="" alert"Please enter site!"; return false; if confirm"Are you sure?"...

JiRos Banner Experience 1.0 (Create Admin Bypass) Remote Exploit

Exploit for unknown platform in category web applications ================================================================ JiRos Banner Experience 1.0 Create Admin Bypass Remote Exploit ================================================================ Jiros Banner Experience Pro Unauthorized Admin...

JiRos Banner Experience 1.0 - Unauthorized Create Admin

Jiros Banner Experience Pro Unauthorized Admin Add Exploit .xpl font-family:tahoma; font-size:11px; text-decoration: none; function jbxpl if document.xplt.victim.value=="" alert"Please enter site!"; return false; if confirm"Are you sure?"...

JiRos Banner Experience 1.0 (Create Admin Bypass) Remote Exploit

No description provided by source. html titleJiros Banner Experience Pro Unauthorized Admin Add Exploit/title body bgcolor="000000" style .xpl font-family:tahoma; font-size:11px; text-decoration: none; /style script language="JavaScript" function jbxpl if document.xplt.victim.value=="" alert"Plea...

JBrowser 1.0/2.x - Unauthorized Admin Access

source: https://www.securityfocus.com/bid/9537/info Due to a lack of access validation to the 'admin' directory, malevolent users may be able to execute arbitrary admin scripts. This may allow a malicious user to upload arbitrary files to the affected system and gain access to files outside of th...

Beanwebb's Guestbook 1.0 Multiple Vulnerabilities

The remote host is running Beanwebb's Guestbook. This set of CGIs has two vulnerabilities : - Anyone can access the admin page admin.php - It is vulnerable to cross-site scripting attacks in add.php An attacker may use these flaws to steal the cookies of your users or to inject fake information i...

CVE-2002-0096

The CVE-2002-0096 entry concerns Geeklog 1.3. The installation process creates an extra group_assignments record that is not deleted, causing the first newly created user to be added to the GroupAdmin and UserAdmin groups and potentially receive unintended administrative privileges. Connected sou...

CGIscript.net - csNews.cgi - Multiple Vulnerabilities

CGIscript.net - csNews.cgi - Multiple Vulnerabilities --------------------------------------------------------------------- Date : June 11, 2002 Product : csNews.cgi csNews standard csNews.cgi csNews Pro Vendor : WWW.CGIscript.NET, LLC. Homepage : http://www.cgiscript.net/ DISCUSSION:...

Mautic core - Highly Critical - XSS vulnerability leveraged through referrers could allow un-authorized admin access

More info at https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4...