Lucene search
+L

54 matches found

NVD
NVD
added 2015/08/19 3:59 p.m.16 views

CVE-2015-6523

Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...

6.8CVSS7.5AI score0.01178EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
added 2015/08/19 3:59 p.m.33 views

CVE-2015-6523

Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...

6.8CVSS7AI score0.01178EPSS
SaveExploits1
CVE
CVE
added 2015/08/19 3:0 p.m.52 views

CVE-2015-6523

The CVE-2015-6523 entry concerns the WordPress Portfolio plugin prior to version 1.05, where a Cross-Site Request Forgery (CSRF) flaw in the instagram-portfolio page of wp-admin/options-general.php allows remote attackers to hijack administrator authentication. The vulnerability arises from the p...

6.8CVSS7.7AI score0.01178EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2015/08/19 3:0 p.m.23 views

CVE-2015-6523

Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...

7.5AI score0.01178EPSS
SaveExploits1References3
CVE
CVE
added 2014/10/15 10:3 p.m.56 views

CVE-2014-6523

CVE-2014-6523 affects Oracle E-Business Suite (EBS) through Oracle Applications Framework in versions 12.1.3, 12.2.2, 12.2.3, and 12.2.4. The vulnerability is described as an unspecified issue in the Applications Framework that allows remote authenticated users to affect confidentiality through v...

4CVSS5.2AI score0.01113EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2014/10/15 10:3 p.m.29 views

CVE-2014-6523

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to REST Interface...

5.1AI score0.01113EPSS
SaveExploits0References4
CVE
CVE
added 2013/01/31 2:0 a.m.59 views

CVE-2012-6523

CVE-2012-6523 describes multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01. The flaws allow remote attackers to inject arbitrary web script or HTML via: (1) the p parameter in the getMenus function in codes/wcms.php; and (2) the COMMENT parameter in blog.php, guestbook.php, or foru...

4.3CVSS5.9AI score0.01879EPSS
SaveExploits2References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2012/07/30 12:0 a.m.12 views

Mac Software Update DNS Query Detection

Binary data 6523.prm...

7.3AI score
SaveExploits0
CVE
CVE
added 2009/03/25 6:0 p.m.52 views

CVE-2008-6523

The CVE-2008-6523 issue affects openInvoice 0.90 beta and earlier where auth.php allows remote authentication bypass by setting the oiauth cookie, enabling privilege gain. The note indicates this can be combined with a separate vulnerability in resetpass.php to modify passwords for arbitrary user...

7.5CVSS7.4AI score0.02561EPSS
SaveExploits2References3Affected Software1
OpenVAS
OpenVAS
added 2009/01/23 12:0 a.m.31 views

SuSE Update for opera SUSE-SA:2008:001

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse2008001.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for opera SUSE-SA:2008:001 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

10CVSS6.4AI score0.05018EPSS
SaveExploits2References1
Circl
Circl
added 2008/04/18 12:0 a.m.8 views

CVE-2008-6523

creationtimestamp| type| source ---|---|--- 2008-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5466...

7.5CVSS5.8AI score0.02561EPSS
SaveExploits2References1
CVE
CVE
added 2007/12/24 8:0 p.m.53 views

CVE-2007-6523

CVE-2007-6523 affects Opera 9.50 beta and Opera 9.x prior to 9.25. The issue is a vulnerability in the handling of bitmap (BMP) files where a crafted BMP can trigger a large number of calculations and checks, leading to high CPU usage and a potential denial of service. The root cause is described...

7.8CVSS6.4AI score0.02055EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2006/12/14 1:0 a.m.28 views

CVE-2006-6523

Cross-site scripting XSS vulnerability in mail/manage.html in BoxTrapper in cPanel 11 allows remote attackers to inject arbitrary web script or HTML via the account parameter...

5.7AI score0.02069EPSS
SaveExploits2References6
CVE
CVE
added 2006/12/14 1:0 a.m.63 views

CVE-2006-6523

The CVE-2006-6523 entry concerns an XSS vulnerability in BoxTrapper’s mail/manage.html for cPanel 11, exploitable via the account parameter. The affected component is BoxTrapper (cPanel 11) and the root cause is cross-site scripting through unvalidated input in the account parameter, allowing inj...

6.8CVSS6AI score0.02069EPSS
SaveExploits2References6Affected Software1
Rows per page
Query Builder