EUVD-2012-1264

Malware in sbrugna...

EUVD-2012-1263

Malware in sbrugna...

CVE-2012-1238

Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2012-1237

Cross-site request forgery CSRF vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users...

Session fixation

Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2012-1238

Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2012-1237

SENCHA SNS

CVE-2012-1238

CVE-2012-1238 affects SENCHA SNS prior to 1.0.2. The vulnerability is a session-fixation issue that may allow a remote, unauthenticated attacker to impersonate an honest user and access or alter information. Public sources (JVN/JVNDB/NVD) confirm the impact and publicly advise updating to the lat...

CVE-2012-1237

Cross-site request forgery CSRF vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-1238: Undefined Security Weakness

Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors...

PT-2012-3154

Name of the Vulnerable Software and Affected Versions SENCHA SNS versions prior to 1.0.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions prior to 1.0.2, update to version 1.0.2 or later to resolve...

PT-2012-3155

Name of the Vulnerable Software and Affected Versions SENCHA SNS versions prior to 1.0.2 Description The issue allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations For versions prior to 1.0.2, update to version 1.0.2 or later to...

CVE-2012-1237: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users...

SENCHA SNS vulnerable to session fixation

Overview SENCHA SNS contains a session fixation vulnerability. SENCHA SNS is an open source SNS software. SENCHA SNS contains a session fixation vulnerability. Hiroshi Tokumaru of HASH Consulting Corp. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

SENCHA SNS vulnerable to cross-site request forgery

Overview SENCHA SNS contains a cross-site request forgery vulnerability. SENCHA SNS is an open source SNS software. SENCHA SNS contains a cross-site request forgery vulnerability. Hiroshi Tokumaru of HASH Consulting Corp. reported this vulnerability to IPA. JPCERT/CC coordinated with the develope...

JVN#97200417: SENCHA SNS vulnerable to session fixation

SENCHA SNS is an open source SNS software. SENCHA SNS contains a session fixation vulnerability. Impact A remote, unauthenticated attacker may impersonate an honest user of the affected product. As a result, information may be altered or obtained. Solution Update the Software Update to the latest...

JVN#44913777: SENCHA SNS vulnerable to cross-site request forgery

SENCHA SNS is an open source SNS software. SENCHA SNS contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged in, arbitrary operations may be conducted on the vulnerable system. Solution Update the Software Update to the latest version provided by...