phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== phpMyAdmin 3.1.0 XSRF SQL Injection Vulnerability =================================================== Written by Michael Brooks Intro: phpMyAdmin is by far the most popular PHP project...

XAMPP 1.6.8 (XSRF) Change Administrative Password Exploit

Exploit for unknown platform in category remote exploits ========================================================= XAMPP 1.6.8 XSRF Change Administrative Password Exploit ========================================================= XAMPP change administrative password:...

XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)

XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads from sourceforge.net...

phpMyAdmin 3.1.0 - Cross-Site Request Forgery / SQL Injection

Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side XSRF attacks against XAMPP and Simpl...

XAMPP 1.6.8 Password Exploit

XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads from sourceforge.net...

vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit

No description provided by source. / ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 softwa...

vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm

/ ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 software which comes included + with the...

vBulletin 3.7.3 - Visitor Message Cross-Site Request Forgery Worm

vBulletin 3.7.3 - Visitor Message Cross-Site Request Forgery Worm / ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in...

vbulletin-xssxsrf.txt

/ ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 software which comes included + with the...

vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit

Exploit for unknown platform in category web applications ======================================================= vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit ======================================================= / ----------------------------- Author = Mx Title = vBulletin 3.7.3...

vBulletin 3.7.3 - Visitor Message Cross-Site Request Forgery / Worm

/ ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 software which comes included + with the...

FtitzBox

Exploitation: Remote with browser Exploit: Available Impact: Medium Fix: N/A - Description: Via XSRF change settings in FritzBox. - Vulnerability: XSRF vulnerability, when you use the FritzBox without passwort login - example Exploit for Portforwarding: html body...

Multiple Cross-Site Scripting Vulnerabilities in DedeCms v5.x

No description provided by source. .: Multiple Cross-Site Scripting Vulnerabilities in DedeCms v5.x .: Author Depo2 - TpTLabs.com .: Affected versions http://www.dedecms.com/ - DedeCms v5.x .: Credit The disclosure of these issues has been credited to Depo2 .: Classification Attack Type: Input...

DSECRG-08-030.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-030 Application: Claroline eLearning and eWorking platform Versions Affected: 1.8.9 Vendor URL: http://www.claroline.net/ Bug: Multiple XSS, Phishing Through URL Redirection, Change User Password XSRF Vulnerability Exploits: YES Reported:...

XSRF/CSRF for creating a database and modifying user charset

PMASA-2008-5 Announcement-ID: PMASA-2008-5 Date: 2008-07-15 Updated: 2008-07-16 Summary XSRF/CSRF for creating a database and modifying user charset Description We received an advisory from Aung Khant YGN Ethical Hacker Group, and we wish to thank him for his work. A logged-in user, if abused int...

glassfish-xss.txt

============================== XSS - Glassfish Web Admin Interface Sun Java System Application Server 9.101 build b09d-fcs ============================== Author: Eduardo Neves a.k.a eth0 Date: 10 june 2008 Site: http://webappsecurity.wordpress.com ============================== APPLICATION :...

nextgen-xss.txt

============================== XSS - Nextgen gallery 0.96 wordpress plugin ============================== Author: Eduardo Neves a.k.a eth0 Date: 07 june 2008 Site: webappsecurity.wordpress.com ————————————— APPLICATION : Nextgen gallery VERSION : alert'xss'; And when the gallery was posted, user...

WEBAlbum <= 2.0 Remote Stored Cross Site Scripting Vulnerability

================================================================ WEBAlbum = 2.0 Remote Stored Cross Site Scripting Vulnerability ================================================================ AUTHOR : CWH Underground DATE : 5 June 2008 SITE : www.citec.us APPLICATION : WEBAlbum VERSION : = 2.0...

webalbum-xss.txt

================================================================ WEBAlbum XSS Vulnerabilities POST Variable: id POST Variable: category Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, Win7dos, JabAv0C...

cPanel XSRF vulnerabilities

Overview cPanel contains multiple cross-site request forgery XSRF vulnerabilities. If successfully exploited, these vulnerabilities may allow an attacker to execute arbitrary commands. Description cPanel, a web-based tool that is designed to automate and control web sites and servers, contains...