CVE-2020-35270

CVE-2020-35270 pertains to a SQL injection in the product described as "Student Result Management System In PHP With Source Code". The documents consistently state that an attacker can access the Admin Panel and manage accounts via SQL injection, but there are no concrete details on affected vers...

CVE-2020-35270

Student Result Management System In PHP With Source Code is affected by SQL injection. An attacker can able to access of Admin Panel and manage every account of Result...

Informatica: loing in to marketplace panel on enablement.informatica.com

hello dear support I have found the issue and you can log in in to panel with any password and username F1163976 url: https://enablement.informatica.com/marketplace/ F1163979 Impact Can gain access to admin panel...

Alumni Management System 1.0 - _Last Name field in Registration page_ Stored XSS

Exploit Title: Alumni Management System 1.0 - "Last Name field in Registration page" Stored XSS Exploit Author: Siva Rajendran Date: 2020-12-31 Vendor Homepage: https://www.sourcecodester.com/php/14524/alumni-management-system-using-phpmysql-source-code.html Software Link:...

CVE-2020-36191

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

DEBIAN-CVE-2020-36191

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

CVE-2020-36191

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

CVE-2020-36191

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

PYSEC-2021-67

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

Cross site request forgery (csrf)

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

UBUNTU-CVE-2020-36191

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

CVE-2020-36191

CVE-2020-36191 affects JupyterHub 1.1.0 where CSRF is possible in the admin panel via a request that omits the _xsrf field, demonstrated by a /hub/api/user request for adding or removing a user account. The issue is a CSRF vulnerability in the admin interface that can be exploited by authenticate...

CVE-2020-36191

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

CVE-2020-36191

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

Barco Transform NDN-210 Command Injection Vulnerability (CNVD-2021-04820)

The Barco Transform NDN-210 is a PC-based network graphics processor from Barco in the Netherlands. The device displays encoded streams from Gbit Ethernet/IP networks and supports formats such as H-264, MPEG-4, MPEG-2, MJPEG, V2D and ProServer. A command injection vulnerability exists in Barco...

PT-2021-11960 · Unknown · Jupyterhub

Name of the Vulnerable Software and Affected Versions: JupyterHub version 1.1.0 Description: The issue allows for CSRF in the admin panel via a request that lacks an xsrf field. This can be demonstrated by a "/hub/api/user" request, which can be used to add or remove a user account...

JupyterHub Cross-Site Request Forgery Vulnerability

JupyterHub is a multi-user server for Jupyter. JupyterHub 1.1.0 suffers from a cross-site forged request vulnerability that stems from a missing xsrf field in the admin panel. An attacker can exploit this vulnerability to send unintended requests to the server via an affected client...

Anchor CMS 0.12.7 Cross Site Scripting

Exploit Title: Anchor CMS 0.12.7 - 'markdown' Stored Cross-Site Scripting Date: 2021-10-01 Exploit Author: Ramazan Mert GÖKTEN Vendor Homepage: anchorcms.com Vulnerable Software: https://github.com/anchorcms/anchor-cms/releases/download/0.12.7/anchor-cms-0.12.7-bundled.zip Affected Version: 0.12....

Cemetry Mapping and Information System 1.0 - Multiple Stored Cross-Site Scripting

Exploit Title: Cemetry Mapping and Information System 1.0 - Multiple Stored Cross-Site Scripting Exploit Author: Mesut Cetin Date: 2021-01-10 Vendor Homepage: https://www.sourcecodester.com/php/12779/cemetery-mapping-and-information-system-using-phpmysqli.html Software Link:...

Cemetery Mapping And Information System 1.0 Cross Site Scripting

Exploit Title: Cemetry Mapping and Information System 1.0 - Multiple Stored Cross-Site Scripting Exploit Author: Mesut Cetin Date: 2021-01-10 Vendor Homepage: https://www.sourcecodester.com/php/12779/cemetery-mapping-and-information-system-using-phpmysqli.html Software Link:...