9 matches found
CVE-2018-1000133
Pitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that can result in A standard unprivileged user could gain system administrator permissions within the web portal.. This attack appear to be exploitable via The user must be able to...
CVE-2018-1000133
Pitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that can result in A standard unprivileged user could gain system administrator permissions within the web portal.. This attack appear to be exploitable via The user must be able to...
CVE-2018-1000133
Pitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that can result in A standard unprivileged user could gain system administrator permissions within the web portal.. This attack appear to be exploitable via The user must be able to...
CVE-2018-1000133
Pitchfork v1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that lets a logged-in, unprivileged user elevate to System Administrator within the web portal. Root cause: incorrect permission handling that permits self-assigning System Administrator r...
CVE-2017-1000133
Mahara versions affected: 15.04 before 15.04.8, 15.10 before 15.10.4, and 16.04 before 16.04.2. The vulnerability allows an attacker to cause another user’s artefacts to be included in the attacker’s Leap2a export, effectively enabling exposure of another user’s artefacts. Some connected sources ...
CVE-2016-1000133
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...
CVE-2016-1000133
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...
CVE-2016-1000133
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...
CVE-2016-1000133
The Nuclei template confirms CVE-2016-1000133: a reflected XSS in WordPress plugin forget-about-shortcode-buttons v1.1.1, enabling arbitrary script execution in a user’s browser and potential cookie theft. Affected component: WordPress plugin forget-about-shortcode-buttons (version 1.1.1). Root c...