Tongda User Session Disclosure Detection

Tongda User session exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Tongda User session exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tongda User Session Disclosure Detection', 'description': 'Tongda...

CVE-2019-11078

MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...

EUVD-2009-0879

Malware in sbrugna...

Cross site request forgery (csrf)

MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...

CVE-2019-11078

MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...

CVE-2019-11078

MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...

CVE-2019-11078: Cross-Site Request Forgery (CSRF)

MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...

PT-2019-12167

Name of the Vulnerable Software and Affected Versions MKCMS version 5.0 Description The issue allows for a CSRF attack to add a new admin user via the "ucenter/userinfo.php" URI. Recommendations For MKCMS version 5.0, update to a version that includes a fix for this issue, or as a temporary...

深澜软件漏洞SrunDisk注入漏洞三

简要描述： RT 详细说明： 文件：\userinfo.php includeonce"kernel/eidolon.class.php"; $eidolon=new Eidolon"templets/userinfo.html"; includeonce"kernel/member.class.php"; $member=new Member; if$res=$member-searchByName$GET"username",0,"" foreach$res as $v extract$v,EXTROVERWRITE; $eidolon-parseBlock"main";...

nForum 1.5 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Salvatore drosophila Fresta + Application: nForum + Version: 1.5 + Website: http://sourceforge.net/projects/nforum/ + Bugs: A Multiple SQL Injection + Exploitation: Remote + Date: 06 Mar 2009 + Discovered by: Salvatore drosophila Fresta + Author: Salvatore...

Claroline e-Learning <= 1.6 - Remote Hash SQL Injection Exploit

No description provided by source. ?php T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m Vulnerable: Claroline E-Learning Application Exploit By : MHp0rtal Discovered By: Sieg Fried Gr33tz To == Alphaprogrammer , Oilkarchack , DrCephaleX , Str0ke And Iranian Hacking & Security Teams :...

CVE-2012-2275

Multiple cross-site request forgery CSRF vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information, as demonstrated by changing the administrator's email via an editUser action to...

PT-2012-3914

Name of the Vulnerable Software and Affected Versions TestLink versions 1.9.3 and earlier Description The issue allows remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information. This can be demonstrated by changing the administrator's...

CVE-2012-2275: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information, as demonstrated by changing the administrator's email via an editUser action to...

phpplanner - Cross-Site Scripting / SQL Injection

================================== phpplanner XSS / SQL Vulnerability ================================== Script: php planner Date: 12-06-2010 Author: anT!-Tr0J4n My Home : www.Dev-PoinT.com Software Link:http://phpplanner.sourceforge.net/ Tested on: Win7/Linux DorK :...

Sql injection

Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to showtheme.php and the 2 user parameter to userinfo.php...

CVE-2009-0882: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to showtheme.php and the 2 user parameter to userinfo.php...

nForum 1.5 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta + Application: nForum + Version: 1.5 + Website: http://sourceforge.net/projects/nforum/ + Bugs: A Multiple SQL Injection + Exploitation: Remote + Date: 06 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...

nForum 1.5 - Multiple SQL Injections

nForum 1.5 - Multiple SQL Injections Salvatore "drosophila" Fresta + Application: nForum + Version: 1.5 + Website: http://sourceforge.net/projects/nforum/ + Bugs: A Multiple SQL Injection + Exploitation: Remote + Date: 06 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...

nForum 1.5 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== nForum 1.5 Multiple Remote SQL Injection Vulnerabilities ======================================================== Salvatore "drosophila" Fresta + Application: nForum + Version: 1.5 +...