139 matches found
MDT AutoSave 加密问题漏洞
MDT AutoSave is a software application. It provides an automated change management function. MDT AutoSave is vulnerable to an encryption issue that could allow an attacker to break the encryption and gain access to the system...
MDT AutoSave SQL注入漏洞
MDT AutoSave is a software application. It provides an automated change management function. MDT AutoSave suffers from a SQL injection vulnerability that originates from an attacker being able to utilize SQL commands to create a new user on the system and update the user's privileges, granting th...
MDT AutoSave
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: MDT Software Equipment: MDT AutoSave Vulnerabilities: Inadequate Encryption Strength, SQL Injection, Relative Path Traversal, Command Injection, Uncontrolled Search Path Element, Generation of Error...
Denial Of Service (DoS) Through Disk Consumption
Moodle is vulnerable to denial of service DoS attacks. A malicious user with the guest role can create multiple big drafts with the Atto module's editor-autosave feature to cause the system to run out of disk space...
PHPOK V4.5.031 \framework\model\wealth.php wealth_autosave() function has SQL injection vulnerability
PHPOK is a website building system to achieve highly customized open source free website building system. A SQL injection vulnerability exists in the phpok version 4.5.031 \framework\model\wealth.php wealthautosave function. Allows an attacker to exploit the vulnerability to obtain sensitive...
CVE-2015-5332
Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service disk consumption by leveraging the guest role and entering drafts with the editor-autosave feature...
CVE-2015-5332
Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service disk consumption by leveraging the guest role and entering drafts with the editor-autosave feature...
CVE-2015-5332: Undefined Security Weakness
Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service disk consumption by leveraging the guest role and entering drafts with the editor-autosave feature...
PT-2016-1300
Name of the Vulnerable Software and Affected Versions Moodle versions 2.8.x through 2.8.8 Moodle versions 2.9.x through 2.9.2 Description The issue is related to resource management errors in the Atto component of the Moodle learning management system. It can be exploited by a remote attacker usi...
CVE-2012-2097
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
CVE-2012-2097
CVE-2012-2097 describes a Cross-site request forgery (CSRF) vulnerability in the Drupal Autosave module. Affects: Autosave 6.x versions prior to 6.x-2.10 and 7.x versions prior to 7.x-2.0. Root cause: insufficient protection against submission of saved results to a node, enabling remote attackers...
CVE-2012-2097
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
CVE-2012-2097
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
CVE-2012-2097: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
PT-2012-3805
Name of the Vulnerable Software and Affected Versions Drupal Autosave module versions 6.x before 6.x-2.10 Drupal Autosave module versions 7.x-2.x before 7.x-2.0 Description A cross-site request forgery CSRF issue exists in the Autosave module, allowing remote attackers to hijack the authenticatio...
SA-CONTRIB-2012-059 - Autosave - Cross Site Request Forgery
CVE: CVE-2012-2097 This module enables snapshots of your node edit form to be saved in the background while you are editing to help prevent the data from being lost. The module doesn't sufficiently protect against a user being tricked into submitting saved results to a node. Versions affected...
Wordpress 2.7.0 admin remote code execution vulnerability-vulnerability warning-the black bar safety net
by Ryatpuretot mail: puretot at gmail dot com team: http://www.80vul.com date: 2008-12-18 Analysis: This vulnerability out in the background: wp-admin/post.php if currentusercan'editpost', $postID if $last = wpcheckpostlock $post-ID $lastuser = getuserdata $last ; $lastusername = $lastuser ?...
