8 matches found
CVE-2019-16106
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitmentonline/personalData/actacounttab.cfm txtNewUserName and hdNP fields...
CVE-2020-16106
CVE-2020-16106 entry is rejected/not used per the description.
CVE-2019-16106
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitmentonline/personalData/actacounttab.cfm txtNewUserName and hdNP fields...
CVE-2019-16106
The CVE-2019-16106 entry affects the Recruitment module of Humanica Humatrix versions 7 1.0.0.203 and 1.0.0.681. An unauthenticated attacker can change a user’s password via the recruitment_online/personalData/act_acounttab.cfm parameters txtNewUserName and hdNP, enabling account compromise. The ...
CVE-2017-16106
CVE-2017-16106 : The static file server tmock is vulnerable to a directory traversal via URLs containing ".. /", allowing access to the filesystem (e.g., reading /etc/passwd). Several connected advisories confirm this issue and indicate there is no patch available ; the guidance is to restrict tm...