288 matches found
CVE-2012-2629
CVE-2012-2629 describes multiple CSRF and XSS vulnerabilities in Axous 1.1.1 and earlier. The issues allow remote attackers to hijack administrator sessions and perform actions such as adding admin accounts (CSRF via admin/administrators_add.php) or injecting script via multiple parameters (for e...
CVE-2020-5530
Cross-site request forgery CSRF vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5993
Cross-site request forgery CSRF vulnerability in Category Specific RSS feed Subscription version v2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5992
Cross-site request forgery CSRF vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5984
Cross-site request forgery CSRF vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5971
Cross-site request forgery CSRF vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5974
Cross-site request forgery CSRF vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5983
Cross-site request forgery CSRF vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5973
Cross-site request forgery CSRF vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5960
Cross-site request forgery CSRF vulnerability in WP Open Graph 1.6.1 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5963
Cross-site request forgery CSRF vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5973
CVE-2019-5973 is a CSRF vulnerability in the WordPress Plugin “Online Lesson Booking” that affects version 0.8.6 and earlier. The flaw allows remote attackers to hijack an administrator’s authenticated session via unspecified vectors, potentially enabling unintended actions while the administrato...
CVE-2019-1879
A vulnerability in the CLI of Cisco Integrated Management Controller IMC could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient validation of user-supplied input at the CLI. An attacker could explo...
CVE-2019-10048
The ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the appropriate validation and sanitization of user supplied input in the plugin's configuration options, allowing arbitrary shell commands to be entered that result in command execution on the underlying...
CVE-2019-5920
Cross-site request forgery CSRF vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...
WEM 4.6 - Error accessing to the admin console: "You are not registered as a Workspace Environment Management administrator."
Error while connecting to WEM admin console: "You are not registered as a Workspace Environment Management Administrator. Therefore, you are not allowed to access the service. Please contact your Workspace Environment Management Administrator to gain access."...
Apple macOS High Sierra Security Logic Flaw Vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple Inc. for Mac computers.Security is one of the security components of the system. A security vulnerability exists in the authentication of credentials in the Security component of Apple macOS High Sierra version 10.13.2. ...
CVE-2018-0647
Cross-site request forgery CSRF vulnerability in WL-330NUL Firmware version prior to 3.0.0.46 allows remote attackers to hijack the authentication of administrators via unspecified vectors...