54 matches found
CVE-2015-6523
Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...
CVE-2015-6523
Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...
CVE-2015-6523
The CVE-2015-6523 entry concerns the WordPress Portfolio plugin prior to version 1.05, where a Cross-Site Request Forgery (CSRF) flaw in the instagram-portfolio page of wp-admin/options-general.php allows remote attackers to hijack administrator authentication. The vulnerability arises from the p...
CVE-2015-6523
Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...
CVE-2014-6523
CVE-2014-6523 affects Oracle E-Business Suite (EBS) through Oracle Applications Framework in versions 12.1.3, 12.2.2, 12.2.3, and 12.2.4. The vulnerability is described as an unspecified issue in the Applications Framework that allows remote authenticated users to affect confidentiality through v...
CVE-2014-6523
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to REST Interface...
CVE-2012-6523
CVE-2012-6523 describes multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01. The flaws allow remote attackers to inject arbitrary web script or HTML via: (1) the p parameter in the getMenus function in codes/wcms.php; and (2) the COMMENT parameter in blog.php, guestbook.php, or foru...
Mac Software Update DNS Query Detection
Binary data 6523.prm...
CVE-2008-6523
The CVE-2008-6523 issue affects openInvoice 0.90 beta and earlier where auth.php allows remote authentication bypass by setting the oiauth cookie, enabling privilege gain. The note indicates this can be combined with a separate vulnerability in resetpass.php to modify passwords for arbitrary user...
SuSE Update for opera SUSE-SA:2008:001
Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse2008001.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for opera SUSE-SA:2008:001 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...
CVE-2008-6523
creationtimestamp| type| source ---|---|--- 2008-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5466...
CVE-2007-6523
CVE-2007-6523 affects Opera 9.50 beta and Opera 9.x prior to 9.25. The issue is a vulnerability in the handling of bitmap (BMP) files where a crafted BMP can trigger a large number of calculations and checks, leading to high CPU usage and a potential denial of service. The root cause is described...
CVE-2006-6523
Cross-site scripting XSS vulnerability in mail/manage.html in BoxTrapper in cPanel 11 allows remote attackers to inject arbitrary web script or HTML via the account parameter...
CVE-2006-6523
The CVE-2006-6523 entry concerns an XSS vulnerability in BoxTrapper’s mail/manage.html for cPanel 11, exploitable via the account parameter. The affected component is BoxTrapper (cPanel 11) and the root cause is cross-site scripting through unvalidated input in the account parameter, allowing inj...