Tryton-server Access Privilege Vulnerability

tryton is a general-purpose application framework, GPL-3 licensed, written in Python, with PostgreSQL as the database engine. A security vulnerability exists on the server side of Tryton, which can be exploited by an authenticated attacker to write arbitrary values to record fields...

CVE-2013-7080: Undefined Security Weakness

The creating record functionality in Extension table administration library feuseradminLib.inc in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, and 6.0.0 through 6.0.11 allows remote attackers to write to arbitrary fields in the configuration database table via crafted links, aka "Mass...