25 matches found
Shopclues.com Cross Site Request Forgery
Exploit Title: Cross-Site Request Forgery CSRF at SHOPCLUES Date: 17.07.2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.shopclues.com/ Software Type : Website Software Version : N/A Vulenrability : Cross-Site Request Forgery CSRF Risk : Medium Description : What is Cross-Site...
CVE-2017-7969
A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack require...
Cross site request forgery (csrf)
A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack require...
Faveo Helpdesk Community 1.9.3 Cross Site Request Forgery
Exploit Title: CSRF / Privilege Escalation Manipulation of Role Agent to Admin on Faveo version Community 1.9.3 Google Dork: no Date: 05-April-2017 Exploit Author: @runggareksya, @yokoacc, @AdyWikradinata, @dickysofficial, @dvnrcy Vendor Homepage: http://www.faveohelpdesk.com/ Software Link:...
MikroTik RouterOS Cross Site Request Forgery
MikroTik RouterOS v5.0 Admin Password Change CSRF Vulnerability by @SymbianSyMoh What is MikroTik RouterOS?! MikroTik RouterOS is an operating system based on the Linux kernel, known as the MikroTik RouterOS. Installed on the company's proprietary hardware RouterBOARD series, or on standard...