622 matches found
CVE-2017-1000046
Mautic 2.6.1 and earlier fails to set flags on session cookies...
Session fixation
Mautic 2.6.1 and earlier fails to set flags on session cookies...
CVE-2017-1000046
CVE-2017-1000046 affects Mautic 2.6.1 and earlier, where session cookies are not set with proper flags. Multiple sources (NVD entry and related advisories) confirm the issue center on Mautic’s cookie handling; no explicit remediation or affected versions beyond the stated 2.6.1 and earlier are pr...
CVE-2017-1000046
Mautic 2.6.1 and earlier fails to set flags on session cookies...
Mautic <= 1.4.1 Multiple CSRF Vulnerabilities
Mautic is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Mautic Detection (HTTP)
HTTP based detection of Mautic. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.108182";...
Mautic Cross-Site Request Forgery Vulnerability
Mautic is a marketing automation software. Multiple cross-site request forgery CSRF vulnerabilities exist in Mautic version 1.4.1. The vulnerabilities allow remote attackers to hijack a user's authentication information and perform unauthorized actions, including: deleting email campaigns or,...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that 1 delete email campaigns or 2 delete contacts...
CVE-2017-8874
Multiple cross-site request forgery CSRF vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that 1 delete email campaigns or 2 delete contacts...
CVE-2017-8874
Multiple cross-site request forgery CSRF vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that 1 delete email campaigns or 2 delete contacts...
CVE-2017-8874
CVE-2017-8874 affects Mautic 1.4.1 and describes multiple CSRF vulnerabilities that allow remote attackers to hijack a user’s session to perform actions such as deleting email campaigns or deleting contacts. The NVD notes CVSS-3.0 base score 8.8 (high) with network attack vector, low access compl...
CVE-2017-8874
Multiple cross-site request forgery CSRF vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that 1 delete email campaigns or 2 delete contacts...
Mautic 1.3.0 CSRF / XSS / User Enumeration / DoS
Exploit Title: Mautic v1.3.0 Multiple Vulnerabilities Date: 01/04/2016 Author: Mickael Dorigny @ Synetis Vendor or Software Link: https://www.mautic.org/ Version: 1.3.0 Category: Multiple Vulnerabilities Mautic description : ======================================================================...
XSS vulnerability on asset view
Impact Mautic versions before 3.3.4 / 4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets. Patch...
Mautic core - Highly Critical - XSS vulnerability leveraged through referrers could allow un-authorized admin access
More info at https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4...
XSS vulnerability on password reset page
Impact For Mautic versions prior to 3.3.4, there is an XSS vulnerability on Mautic's password reset page where a vulnerable parameter, "bundle," in the URL could allow an attacker to execute Javascript code. The attacker would be required to convince or trick the target into clicking a password...
Mautic core - Highly Critical - XSS vulnerability leveraged through referrers could allow un-authorized admin access
More info at https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4...
Mautic core - Moderately Critical - XSS vulnerability when creating/editing a company
More info at https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4...
Stored XSS vulnerability on Bounce Management Callback
Impact Insufficient sanitization / filtering allows for arbitrary JavaScript Injection in Mautic using the bounce management callback function. The values submitted in the "error" and "errorrelatedto" parameters of the POST request of the bounce management callback will be permanently stored and...
Mautic core - Highly Critical - XSS vulnerability leveraged through referrers could allow un-authorized admin access
More info at https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4...