87 matches found
CVE-2023-47024
Cross-Site Request Forgery CSRF in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types...
CVE-2023-47024
Cross-Site Request Forgery CSRF in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types...
CVE-2023-47024
CVE-2023-47024 affects NCR Terminal Handler v1.5.1 and centers on CSRF, enabled by multiple vulnerabilities including an undisclosed function in the WSDL with weak security controls that can accept custom content types. This can allow a remote attacker to trigger a one‑click account takeover via ...
CVE-2023-47024
Cross-Site Request Forgery CSRF in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types...
CVE-2023-47024
Cross-Site Request Forgery CSRF in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types...
PT-2024-13400 · Ncr · Ncr Terminal Handler
Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: The issue is related to Cross-Site Request Forgery CSRF that can lead to a one-click account takeover. It is achieved by exploiting multiple vulnerabilities, including an undisclosed function in...