4966 matches found
CVE-2015-2701
Cross-site request forgery CSRF vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests that change a user password via a request to profiles-update/...
CVE-2015-2701
CVE-2015-2701 describes a CSRF vulnerability in CS-Cart 4.2.4 where an attacker can hijack a user’s authenticated session by crafting a request to profiles-update/ that changes a password. The affected product is CS-Cart 4.2.4; the underlying issue is cross-site request forgery. No explicit fixes...
IT-Grundschutz M4.007: Änderung voreingestellter Passwörter
IT-Grundschutz M4.007: Änderung voreingestellter Passwörter. Stand: 14. Ergänzungslieferung 14. EL. Hinweis: Test wird nur über SSH und Telnet ausgeführt. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2015-2676
Cross-site request forgery CSRF vulnerability in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...
CS-Cart 4.2.4 - CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: CS-Cart 4.2.4 CSRF Google Dork: intext:"© 2004-2015 Simtech" Date: March 11, 2015 Exploit Author: Luis Santana Vendor Homepage: http://cs-cart.com Software Link:...
CVE-2015-2350
Cross-site request forgery CSRF vulnerability in MikroTik RouterOS 5.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request in the status page to /cfg...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in MikroTik RouterOS 5.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request in the status page to /cfg...
CVE-2015-2350
Cross-site request forgery CSRF vulnerability in MikroTik RouterOS 5.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request in the status page to /cfg...
Qibo Blog 1.0 /blog/ajax.php 远程密码修改漏洞
No description provided by source...
CS-Cart 4.2.4 - Cross-Site Request Forgery
CS-Cart 4.2.4 - Cross-Site Request Forgery Exploit Title: CS-Cart 4.2.4 CSRF Google Dork: intext:"© 2004-2015 Simtech" Date: March 11, 2015 Exploit Author: Luis Santana Vendor Homepage: http://cs-cart.com Software Link:...
CS-Cart 4.2.4 - Cross-Site Request Forgery
Exploit Title: CS-Cart 4.2.4 CSRF Google Dork: intext:"© 2004-2015 Simtech" Date: March 11, 2015 Exploit Author: Luis Santana Vendor Homepage: http://cs-cart.com Software Link: https://www.cs-cart.com/index.php?dispatch=pages.gettrial&pageid=297&edition=ultimate Version: 4.2.4 Tested on: Linux +...
Arbitrary User Password Change Vulnerability in AnyMacro Email System Used by Multiple Organizations
AnyMacro is a professional product and solution provider in the field of email and unified messaging. A security vulnerability exists in the AnyMacro email system due to the failure of the user password recovery function to properly verify user passwords. This vulnerability allows an attacker to...
PT-2015-3735 · Red Hat · Red Hat Cloudforms
Name of the Vulnerable Software and Affected Versions: Red Hat CloudForms 3.1 Management Engine CFME version 5.3 Description: The issue concerns the customization template in Red Hat CloudForms, which uses a default password for the root account when no password is specified for a new image. This...
CVE-2014-10019
Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...
CVE-2014-10019
Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...
PHPads 213607 - Authentication Bypass / Password Change Exploit
Exploit for php platform in category web applications PHPads Authentication Bypass Exploit PHPads Authentication Bypass / Administrator Password Change Exploit Target : " size="70" / '1', 'newlogin' = $username, 'newpass' = "htlover"; $ch = curlinit; curlsetopt$ch, CURLOPTURL,$target;...
PHPads 213607 - Authentication Bypass / Password Change
PHPads Authentication Bypass Exploit PHPads Authentication Bypass / Administrator Password Change Exploit Target : " size="70" / '1', 'newlogin' = $username, 'newpass' = "htlover"; $ch = curlinit; curlsetopt$ch, CURLOPTURL,$target; curlsetopt$ch, CURLOPTRETURNTRANSFER,1; curlsetopt$ch,...
PHPads 213607 - Authentication Bypass Password Change
PHPads 213607 - Authentication Bypass Password Change PHPads Authentication Bypass Exploit PHPads Authentication Bypass / Administrator Password Change Exploit Target : " size="70" / '1', 'newlogin' = $username, 'newpass' = "htlover"; $ch = curlinit; curlsetopt$ch, CURLOPTURL,$target;...
BMC TrackIt! 11.3 Unauthenticated Local User Password Change
BMC TrackIt! 11.3 Unauthenticated Local User Password Change Trial available here: http://www.trackit.com A Metasploit pull request has been made here: https://github.com/rapid7/metasploit-framework/pull/4359 BMC TrackIt! 11.3 when installed with TrackItWeb! allows an unauthenticated user to chan...
HackerOne: Issue with password change
When a password is changed in user's profile, then a notification about password change is sent to the user email. This is good. However, user not always gets a notification about password change - when a password is changed via password reset link, then such a notification is not send to the use...