Movie Rating System version 1.0 suffers from a broken access control that allows for administrative account creation.
b8fc9aceefcc0100e5591f702fd611d88f3593dcfbd58c51a4051a97a70517e2SPIP CMS versions 2.x and 3.x suffer from unauthenticated add administrator and arbitrary file upload vulnerabilities.
a7387c189d176bff2a0e9afc63e2bfada0350e829685bdc4a61f682b38596b2dJSPMySQL Administrador version 1 suffers from cross site request forgery and cross site scripting vulnerabilities.
4b98d4efa8a0641fc2b2ad81640cba5efe37dfc82afa6edbaf9506d3e7b1b8c5phpLiteAdmin version 1.1 suffers from cross site request forgery and cross site scripting vulnerabilities.
4283cc61827ee3aa0bb5b327467b0f012ea503321ee6a96b94ce7e7159313d17MySQL Lite Administrator version Beta 1 suffers from multiple cross site scripting vulnerabilities.
22e45557bdd5891450a60cc931c906cf5ba0d0604bd539d0826cc6689d1c1fa9SanyBee Gallery versions 0.2.9 and 0.2.10 suffer from cross site scripting and add administrator vulnerabilities.
f4038f6854de17663fff4ff5953a7bfa407b053ad722c8ea52c6d9aff3a1a1b4phpBugTracker 1.7.5 suffers from cross site scripting, authorization bypass, and SQL injection vulnerabilities.
c13cabadc360f27c984d04adba9d6bfada7181ed571ba4c7d23192572f34182bDesktop Central versions 7 and forward suffer from an add administrator vulnerability.
c2e77377429f0005eda7b7e387bc4d53931aff42d4cb2b99620c29f7791151c0Traidnt Upload 3 add administrator exploit that leverages cookie manipulation.
71cb85b322354b0b3edf1cefc39569e8aaab5712f81d8c66d63f919e11968d8bWeboptima CMS suffers from add administrator and remote shell upload vulnerabilities.
fc99f270ff007095d824949c224a7ce7178b34040bce8b1aaa503770f5db42fcZOHO ManageEngine ADSelfService Plus version 4.5 Build 4521 suffers from an authentication bypass vulnerability.
f77c06fcc32f7f659b5cbeae7e9a84e98c2c34c9153d7d9897701d57dfb559d4112 bytes small Win32/PerfectXp-pc1/sp3 (Tr) add administrator shellcode.
ef768bdd250041675cea8b84b7ea05256a0f3acf5c4cb83ff2c17ed7cc99c639Izlebizi Video Script remote add administrator account exploit.
4424c648d1d8d3e1362a338ee5abe2920da7c2cb0931d51bf872155ac3c73a58WESPA PHP Newsletter version 3.0 suffers from a remote administrative password changing vulnerability when the install script is left in place.
8967ba02e7bee6dbbd12538c41fde3fc9096ae06d10335d62f3cf4e0d8d3794cSimple PHP Newsletter suffers from a remote administrative password changing vulnerability when the install script is left in place.
6156bed607c247ce156c38d3a514e9b119d3dc5eea5758f60ee0a71ddce5ee47Web@All versions 1.1 and below remote administrative settings changing exploit.
f8d27969b53893e2eb3f8f56f6ca3224588ae76337b77ecd6eecd6f3410fd24aPageDirector CMS suffers from add administrator and remote SQL injection vulnerabilities.
366baf5db631fedc6508b4f589e0bc6d77b161b0b3d415d86d79f3c7ca618e5eSysax Multi Server add administrator exploit.
4d877af9359446ddc4f840c14fddf8079898e34129c55edb20886240b3e22148DL_Stats suffers from cross site scripting, arbitrary administrative access and remote SQL injection vulnerabilities.
b49294da943e5b8d608bb946787d49971337c245dfbbe4987112bcaa4cbe37bbAdvanced Management For Services Sites remote add administrator exploit.
1af3b157e1b2a25a22cfb4baac4f82394f84a684297ba1fc5bb7bc5e891558f2NinkoBB version 1.3RC4 change / add administrator cross site request forgery exploit.
01775b95febb29b1e9d59f1606a384b3e2c344be7c32529304e0bbad02d81af8FileExecutive suffers from file disclosure, path disclosure, shell upload, edit administrator and add administrator vulnerabilities.
f7f5c67e670e0bc41e64df6c871a2ab737bf4d7b24e41b3491f140ec2ae8ebedPBBoard version 2.0.5 suffers from add administrator and shell upload vulnerabilities.
29abb40977a4fb0be424a9f90430a489826cd07952a220e94dc1737315b5b968Limny CMS version 2.0 suffers from a cross site request forgery vulnerability that allows for a malicious attacker to have an administrator account created. Proof of concept code included.
9d7e9fbfc073fc42e11f8165efe7cb7c1b21309f2916937abe9248fe8878b6c6Genere par KDPics version 1.18 remote add administrator exploit.
474cc111a072d84f81483d8c895e122c1bfed7ce7653d5356664766c93558ee0
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Subscribe to an RSS Feed