TemaTres 3.0 Cross Site Request Forgery

Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source: https://sourceforge.net/projects/tematres/files/TemaTres%203.0/tematres3.0.zip/download Version: 3.0 CVE : 2019–14345...

TemaTres 3.0 - 'value' Persistent Cross-site Scripting

Exploit Title: TemaTres 3.0 - 'value' Persistent Cross-site Scripting Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source: https://sourceforge.net/projects/tematres/files/TemaTres%203.0/tematres3.0.zip/download Version: 3.0 CVE : 2019–14343 Reference:...

TemaTres 3.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source: https://sourceforge.net/projects/tematres/files/TemaTres%203.0/tematres3.0.zip/download Version: 3.0 CVE : 2019–14345...

CVE-2019-14345

TemaTres 3.0 allows remote unprivileged users to create an administrator account...

CVE-2019-14345

TemaTres 3.0 allows remote unprivileged users to create an administrator account...

Design/Logic Flaw

TemaTres 3.0 allows remote unprivileged users to create an administrator account...

CVE-2019-14343

TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...

Cross site scripting

TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...

CVE-2019-14345

TemaTres 3.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that enables remote unprivileged attackers to create an administrator account. Public exposure is evidenced by exploit writeups (Exploit-DB, PacketStorm, 0day.today, ExploitPack) describing a CSRF flow likely targeting ...

CVE-2019-14345

TemaTres 3.0 allows remote unprivileged users to create an administrator account...

CVE-2019-14343

TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...

CVE-2019-14343

CVE-2019-14343 affects TemaTres 3.0, with a stored XSS vulnerability in the parameter value of the vocab/admin.php?vocabulario_id=list endpoint. Multiple connected records confirm the vulnerability and describe client-side code execution potential. The root cause is a stored XSS flaw in the value...

TemaTres 1.0.3 - Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

tematres 1.0.3 (auth bypass/sql/xss) Multiple Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...

TemaTres 1.3 - _search_expresion Cross-Site Scripting

TemaTres 1.3 - searchexpresion Cross-Site Scripting source: https://www.securityfocus.com/bid/47569/info TemaTres is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

TemaTres 1.3 - '_search_expresion' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47569/info TemaTres is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

TemaTres 1.3 Cross Site Scripting

------------------------------------------------------------------------ Software................TemaTres 1.3 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://sourceforge.net/projects/tematres/ Discovery Date..........4/25/2011...

TemaTres Version Detection

This script detects the installed version of TemaTres. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TemaTres <= 1.031 Multiple XSS and SQLi Vulnerabilities

TemaTres is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

TemaTres Multiple XSS and SQL Injection Vulnerabilities

The host is running TemaTres and is prone to Multiple XSS and SQL Injection Vulnerabilities. OpenVAS Vulnerability Test $Id: gbtematresmultxssnsqlinjvuln.nasl 4892 2016-12-30 15:39:07Z teissa $ TemaTres Multiple XSS and SQL Injection Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009...