Lucene search
+L

6 matches found

Prion
Prion
•added 2018/02/05 4:29 p.m.•23 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting XSS attacks or possibly have unspecified other impact via the name paramet...

6.8CVSS7.5AI score0.15395EPSS
SaveExploits5References3Affected Software1
OSV
OSV
•added 2018/02/05 4:29 p.m.•15 views

CVE-2017-9414

Cross-site request forgery CSRF vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting XSS attacks or possibly have unspecified other impact via the name paramet...

8.8CVSS5.8AI score0.15395EPSS
SaveExploits5References3
NVD
NVD
•added 2018/02/05 4:29 p.m.•38 views

CVE-2017-9414

Cross-site request forgery CSRF vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting XSS attacks or possibly have unspecified other impact via the name paramet...

8.8CVSS9.1AI score0.15395EPSS
SaveExploits5References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/05 12:00 a.m.•2 views

CVE-2017-9414: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting XSS attacks or possibly have unspecified other impact via the name paramet...

8.8CVSS7.7AI score0.15395EPSS
SaveExploits5References2
zdt
zdt
•added 2017/06/05 12:00 a.m.•53 views

Subsonic 6.1.1 - Cross-Site Request Forgery / Cross-Site Scripting Vulnerabilities

Exploit for windows platform in category web applications + Credits: John Page a.k.a hyp3rlinx Vendor: ================ www.subsonic.org Product: =============== subsonic v6.1.1 Subsonic is a media streaming server. You install it on your own computer where you keep your music or video collection...

8.7AI score0.15395EPSS
SaveExploits5
Packet Storm
Packet Storm
•added 2017/06/03 12:00 a.m.•59 views

Subsonic 6.1.1 Persistent XSS

Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SUBSONIC-CSRF-PERSISTENT-XSS.txt + ISR: ApparitionSec Vendor: ================ www.subsonic.org Product: =============== subsonic v6.1.1 Subsonic is a media streaming...

8.9AI score0.15395EPSS
SaveExploits5
Rows per page
Query Builder