ApPHP MicroCMS 3.9.5 - Cross-Site Request Forgery (Add Admin)

Exploit Title :----------------- : ApPHP MicroCMS 3.9.5 - Cross-Site Request Forgery Add Admin Main Author :------------------------ : Besim Google Dork :---------------- : - Date :-------------------------- : 12/10/2016 Type :-------------------------- : webapps Platform : -------------------- :...

BirdBlog 1.4.0 - (Add New Post) Cross-Site Request Forgery

Exploit for php platform in category web applications document.forms0.submit; !--...

BirdBlog 1.4.0 - Cross-Site Request Forgery (Add New Post)

BirdBlog 1.4.0 - Cross-Site Request Forgery Add New Post document.forms0.submit;...

phpEnter 4.2.7 - Cross-Site Request Forgery (Add New Post)

phpEnter 4.2.7 - Cross-Site Request Forgery Add New Post function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "http://sitename/path/addnews.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8";...

BirdBlog 1.4.0 - Cross-Site Request Forgery (Add New Post)

document.forms0.submit;...

ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery (Add New Author)

Exploit Title : ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery Add New Author Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link : http://www.scriptdungeon.com/jump.php?ScriptID=9162 CSRF PoC function submitRequest var xhr = new...

phpEnter 4.2.7 - Cross-Site Request Forgery (Add New Post)

function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "http://sitename/path/addnews.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"; xhr.setRequestHeader"Accept-Language", "en-US,en;q=0.5"; xhr.setRequestHeader"Content-Type"...

Maian Weblog 4.0 - Cross-Site Request Forgery ( Add New Post)

Exploit for php platform in category web applications Exploit Title : Maian Weblog 4.0 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : - Date : 10/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.maianweblog.com Software link :...

Spacemarc News - Cross-Site Request Forgery (Add New Post)

Spacemarc News - Cross-Site Request Forgery Add New Post Exploit Title : Spacemarc News - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : - Date : 10/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.spacemarc.it Software link :...

PHP Press Release Cross Site Request Forgery

Exploit Title : PHP Press Release - Cross-Site Request Forgery Add Admin - Super User Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software link :...

miniblog 1.0.1 Cross Site Request Forgery

Exploit Title : miniblog 1.0.1 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.spyka.net/scripts/php/miniblog Software link : http://dl.spyka.co.uk/scripts/php/miniblog-1-0-1.zip Description admin...

Picosafe Web Gui - Multiple Vulnerabilities

Exploit for php platform in category web applications - Title : Picosafe Web Gui - Multiple Vulnerabilities - Author : Shahab Shamsi - Vendor : https://github.com/embeddedprojects/picosafewebgui - Category : Webapps - Date : 01.October.2016 Vulnerable page :...

Picosafe Web GUI - Multiple Vulnerabilities

Title : Picosafe Web Gui - Multiple Vulnerabilities - Author : Shahab Shamsi - Vendor : https://github.com/embeddedprojects/picosafewebgui - Category : Webapps - Date : 01.October.2016 Vulnerable page : picosafewebgui/webinterface/js/filemanager/filemanager.php ========================== | Remote...

Joomla Topics 1.5.12 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comtopics SQL injection Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comtopics Category: Webapps version: 1.5.12 Tested on: Windows skype:xbadgirl21 Date: 2016/07/08 video Proof Youtube :...

Drupal 6.22 - menupereid SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Drupal 6.22 - menupereid SQL injection Vulnerability Exploit Author : xBADGIRL21 Category: Webapps Tested on: Win | Linux Version: Drupal 6.22 Date: 2016/07/04 PoC: http://www.site.com/content/menucustom?menupereid=SQLi + test:...

WordPress KBoard 2.7 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : WordPress Plugin KBoard 2.7 - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Google Dork : intitle:"KBoard 2.7" Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps...

Joomla DVFolderContent 1.0.2 Local File Disclosure

Exploit Title : Joomla DVFolderContent V1.0.2 Module - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://www.dvextensions.de/en/extensions/dvfoldercontent Category Webapps Tested on Win Version : V1.0.2 Date 2016/10/01 PoC The Vulnerable page is...

WordPress KBoard Cross Site Scripting

Exploit Title : WordPress Plugin KBoard - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps Tested on Win Version : Before 4.4 Date 2016/09/26 PoC =Cross Site Scripting : Payload : 1" onmouseover=prompt"Persian"...

WordPress KBoard 2.7 SQL Injection

Exploit Title : WordPress Plugin KBoard 2.7 - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Google Dork : intitle:"KBoard 2.7" Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps Tested on Win Version : 2.7 Date 2016/09/26 PoC = Sql...

Joomla Event Booking 2.10.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version :...