475 matches found
Improper access control
TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting users.queries.php. It is then possible for a manager user to delete an arbitrary user including admin, or modify attributes of any arbitrary user except administrator. To exploit the vulnerability, an...
CVE-2017-15052
TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting users.queries.php. It is then possible for a manager user to delete an arbitrary user including admin, or modify attributes of any arbitrary user except administrator. To exploit the vulnerability, an...
CVE-2017-15052: Improper Privilege Management
TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting users.queries.php. It is then possible for a manager user to delete an arbitrary user including admin, or modify attributes of any arbitrary user except administrator. To exploit the vulnerability, an...
PT-2017-13837
Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description The issue allows a manager user to delete or modify attributes of any arbitrary user, except for the administrator, by tampering with requests sent directly to the users.queries.php endpoint. Thi...
CVE-2017-12970: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that 1 add or 2 delete user accounts via a request to phpsftpd/users.php...
CVE-2017-8382: Cross-Site Request Forgery (CSRF)
admidio 3.2.8 has CSRF in admprogram/modules/members/membersfunction.php with an impact of deleting arbitrary user accounts...
Admidio Cross-Site Request Forgery Vulnerability (CNVD-2017-10374)
Admidio is a free online membership management system for associations, groups and organizations. The system offers features such as user management, adding and updating homepages, and installing and adjusting modules on it. A cross-site request forgery vulnerability exists in Admidio. The...
CVE-2017-0490
An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android...
UBUNTU-CVE-2017-0490
An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android...
CVE-2017-0490
An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android...
PT-2017-1429
Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description The issue is related to an elevation of privilege vulnerability in Wi-Fi, which could allow a local malicious application to delete user data. This is a local bypass of user interaction requiremen...
CVE-2017-0490: Undefined Security Weakness
An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android...
Dedecms CSRF Vulnerability
Dedecms is an open source PHP open source website management system. Dedecms has a CSRF vulnerability that allows an attacker to exploit the vulnerability to perform unauthorized operations as an administrator and delete the account of any user...
CVE-2016-5231
Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data via a crafted app...
PT-2016-6316
Name of the Vulnerable Software and Affected Versions Huawei Mate8 versions NXT-AL10C00B182 and earlier Huawei Mate8 versions NXT-CL00C92B182 and earlier Huawei Mate8 versions NXT-DL00C17B182 and earlier Huawei Mate8 versions NXT-TL00C01B182 and earlier Description The issue allows attackers to...
CVE-2016-5231: Undefined Security Weakness
Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data via a crafted app...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x before 7.x-4.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete user role matching rules via unspecified vectors...
CVE-2015-3375: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x before 7.x-4.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete user role matching rules via unspecified vectors...
Softbiz Jobs CSRF Vulnerability
No description provided by source. ======================================================================= Softbiz Jobs CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] compan...
Orbis CMS 1.0.2 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: Orbis CMS 1.0.2 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Sun 11 Jul 2010 08:08:10 PM EEST Vendor: http://www.novo-ws.com/orbis-cms/ Download: http://www.ohloh.net/p/orbis-cms/download?filename=orbis-1.0.2.zip --- -= CSRF Po...