QuickAppsCMS Cross-Site Request Forgery Vulnerability

QuickAppsCMS is an open source content management system CMS developed using the MVC framework. A cross-site request forgery vulnerability exists in admin/user/manage/add in QuickAppsCMS version 2.0.0-beta2. A remote attacker can exploit this vulnerability to create an account with administrator...

PYSEC-2017-71

winuseradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs...

Accellion FTA Device Cross-Site Scripting Vulnerability (CNVD-2017-07451)

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. A cross-site scripting vulnerability exists in home/seos/courier/useradd.html in Accellion FTA devices versions prior to FTA912180. ...

CVE-2017-8792

An issue was discovered on Accellion FTA devices before FTA912180. There is XSS in home/seos/courier/useradd.html with the param parameter...

D-Link DGS-1510 - Multiple Vulnerabilities

================ get-user-info.py ================ import re import os.path import urllib2 import base64 import gzip import zlib from StringIO import StringIO from io import BytesIO def makerequests: """Calls request functions sequentially.""" response = None responseText = None...

Cross-Site Request Forgery Vulnerability in yiqicms

Yiqicms is a SEO-based marketing enterprise website system, using PHP+Mysql open source building system. yiqicms background add admin admin/user-add.php at the existence of CSRF vulnerability , through the implantation of csrf form way , you can add the administrator account...

Allomani Movies Library 2.0 - CSRF Vulnerability (Add Admin)

No description provided by source. Movies Library 2.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/moviesscript.html === Exploit === form method=POST name=form0...

Internet Explorer (6/7) Remote Code Execution -Remote User Add Exploit

No description provided by source. Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use Socket; use IO::Socket; print \n; print...

CVE-2013-7181

Cross-site scripting XSS vulnerability in user/ldapuser/add in Fortinet FortiOS 5.0.3 allows remote attackers to inject arbitrary web script or HTML via the filter parameter...

RV Article Publisher - Cross-Site Request Forgery

RV Article Publisher - Cross-Site Request Forgery Exploit Title: RV Article publisher CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

CVE-2011-5074

Multiple cross-site request forgery CSRF vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary script via 1 userprofileedit.p...

KubeBlog Cross Site Request Forgery

======================================================================================== | Title : KubeBlog XSRF Vuln. | Author : The.Morpheus | email : [email protected] | Home : http://www.spyturks.com Date : 03.05.2010 Download : http://scripti.org/indir.php?id=167 | Script : Copyright ©...

Microsoft Internet Explorer 6 / 7 Add User Exploit

Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use Socket; use IO::Socket; print "\n"; print "800008 8 \n"; print "8 e eeeee...

Microsoft Internet Explorer 67 - Remote Code Execution (Remote User Add)

Microsoft Internet Explorer 67 - Remote Code Execution Remote User Add Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use...

Internet Explorer Remote Code Execution - Remote User Add Exploit

Exploit for unknown platform in category remote exploits ================================================================= Internet Explorer Remote Code Execution - Remote User Add Exploit ================================================================= Exploit Title: Internet Explorer 6/7 Remot...

Microsoft Internet Explorer 6/7 - Remote Code Execution (Remote User Add)

Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use Socket; use IO::Socket; print "\n"; print "800008 8 \n"; print "8 e eeeee...

Microsoft Internet Explorer wshom.ocx Code Execution

Exploit Title: IE wshom.ocx Run ActiveX Remote Code Execution add admin user Date: 22/01/2010 Author: Stack Version: ALL Tested on: winsp2 arg1="cmd /c net user username password /add && net localgroup Administrateurs username /add" target.run arg1...

CVE-2009-1733

CVE-2009-1733 describes a CSRF vulnerability in IPplan 4.91a that can allow an attacker to hijack administrator authentication to perform actions such as changing passwords and adding or deleting users, via unknown vectors. The affected software is IPplan (web admin interface), with the underlyin...

CVE-2009-1733

Cross-site request forgery CSRF vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that 1 change the password, 2 add users, or 3 delete users via unknown vectors...