CVE-2012-6508

CVE-2012-6508 affects NetArt Media Car Portal 3.0 with multiple CSRF vulnerabilities that allow an attacker to hijack administrator sessions and perform admin-level actions such as changing user passwords, creating new users or sub-users, and editing profile data via specific actions in the secur...

CVE-2012-6508

Multiple cross-site request forgery CSRF vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; 2 create a user or...

Openfire Admin Console Authentication Bypass

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex/zip' class Metasploit3...

Openfire Server 3.6.0a - Admin Console Authentication Bypass (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex/zip' class Metasploit3...

Openfire Admin Console Authentication Bypass

This module exploits an authentication bypass vulnerability in the administration console of Openfire servers. By using this vulnerability it is possible to upload/execute a malicious Openfire plugin on the server and execute arbitrary Java code. This module has been tested against Openfire 3.6.0...

Gentoo Security Advisory GLSA 200904-01 (openfire)

The remote host is missing updates announced in advisory GLSA 200904-01. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2008-6508

Openfire Openfire Admin Console is affected by a directory traversal (path traversal) vulnerability (CVE-2008-6508) in the AuthCheck filter, enabling remote attackers to bypass authentication and access the admin interface via a .. sequence in a URI that matches the Exclude-Strings list. Affected...

CVE-2008-6508

creationtimestamp| type| source ---|---|--- 2008-11-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7075 2012-06-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19432 2018-05-29 15:50:33+00:00| seen|...

Debian DSA-1488-1 : phpbb2 - several vulnerabilities

Several remote vulnerabilities have been discovered in phpBB, a web-based bulletin board. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0471 Private messaging allowed cross site request forgery, making it possible to delete all private messages of...

CVE-2007-6508

CVE-2007-6508 is a directory traversal vulnerability in xeCMS 1.0 (view.php) that allows remote attackers to read arbitrary files via a ..%2F (dot dot slash) in the list parameter. The entry is supported by multiple sources (NVD, CVE List) with a CVSS v2 base score of 7.5 (HIGH) and network attac...

CVE-2006-6508

Cross-site request forgery CSRF vulnerability in phpBB 2.0.21 allows remote authenticated users to send unauthorized messages as an arbitrary user via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6508

CVE-2006-6508 is a Cross-site request forgery (CSRF) affecting phpBB 2.0.21. The issue allows a remote authenticated user to perform actions (send unauthorized messages as another user) via unspecified vectors. Root cause details are not fully disclosed in the provided documents, but Debian/DSA-1...