Dell SonicWALL Secure Remote Access Cross-Site Request Forgery Vulnerability

Dell SonicWALL Secure Remote Access is a remote security access solution. A cross-site request forgery vulnerability exists in the Dell SonicWALL Secure Remote Access user portal, which allows remote attackers to construct a special cgi-bin/editBookmark request that hijacks an authenticated user...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the user portal in Dell SonicWALL Secure Remote Access SRA products with firmware before 7.5.1.0-38sv and 8.x before 8.0.0.1-16sv allows remote attackers to hijack the authentication of users for requests that create bookmarks via a crafted request...

CVE-2015-2248

Dell SonicWALL Secure Remote Access (SRA) appliances are affected by CVE-2015-2248 (CSRF in the user portal) affecting firmware prior to 7.5.1.0-38sv and 8.x prior to 8.0.0.1-16sv. The vulnerability enables an attacker to hijack a logged-in user’s authentication to create bookmarks via a crafted ...

PT-2015-5687

Name of the Vulnerable Software and Affected Versions Dell SonicWALL Secure Remote Access SRA products with firmware before 7.5.1.0-38sv Dell SonicWALL Secure Remote Access SRA products with firmware 8.x before 8.0.0.1-16sv Description A cross-site request forgery CSRF issue exists in the user...

CVE-2015-2248: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the user portal in Dell SonicWALL Secure Remote Access SRA products with firmware before 7.5.1.0-38sv and 8.x before 8.0.0.1-16sv allows remote attackers to hijack the authentication of users for requests that create bookmarks via a crafted request...

Sql injection

SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action...

CVE-2010-4915

CVE-2010-4915 affects ColdGen ColdBookmarks 1.22, with a vulnerability in the index.cfm function where the BookmarkID parameter in an EditBookmark action enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. The issue is tied to improper handling of the BookmarkID in...

PT-2011-1850

Name of the Vulnerable Software and Affected Versions ColdGen ColdBookmarks version 1.22 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the BookmarkID parameter in an "EditBookmark" action in the index.cfm file. Recommendations For ColdGen...

CVE-2010-4915: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action...

ColdBookmarks 1.22 SQL Injection

ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...

ColdBookmarks 1.22 - SQL Injection

ColdBookmarks 1.22 - SQL Injection ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...