TemaTres 3.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source: https://sourceforge.net/projects/tematres/files/TemaTres%203.0/tematres3.0.zip/download Version: 3.0 CVE : 2019–14345...

TemaTres 3.0 - 'value' Persistent Cross-site Scripting

Exploit Title: TemaTres 3.0 - 'value' Persistent Cross-site Scripting Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source: https://sourceforge.net/projects/tematres/files/TemaTres%203.0/tematres3.0.zip/download Version: 3.0 CVE : 2019–14343 Reference:...

TemaTres 3.0 Cross Site Scripting

Exploit Title: TemaTres 3.0 - 'value' Persistent Cross-site Scripting Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source: https://sourceforge.net/projects/tematres/files/TemaTres%203.0/tematres3.0.zip/download Version: 3.0 CVE : 2019–14343 Reference:...

CVE-2019-14345

TemaTres 3.0 allows remote unprivileged users to create an administrator account...

CVE-2019-14345

TemaTres 3.0 allows remote unprivileged users to create an administrator account...

Design/Logic Flaw

TemaTres 3.0 allows remote unprivileged users to create an administrator account...

CVE-2019-14343

TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...

Cross site scripting

TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...

CVE-2019-14345

TemaTres 3.0 allows remote unprivileged users to create an administrator account...

CVE-2019-14345

TemaTres 3.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that enables remote unprivileged attackers to create an administrator account. Public exposure is evidenced by exploit writeups (Exploit-DB, PacketStorm, 0day.today, ExploitPack) describing a CSRF flow likely targeting ...

CVE-2019-14343

TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...

CVE-2019-14343

CVE-2019-14343 affects TemaTres 3.0, with a stored XSS vulnerability in the parameter value of the vocab/admin.php?vocabulario_id=list endpoint. Multiple connected records confirm the vulnerability and describe client-side code execution potential. The root cause is a stored XSS flaw in the value...

TemaTres 1.0.3 - Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

tematres 1.0.3 (auth bypass/sql/xss) Multiple Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...

TemaTres 1.3 - _search_expresion Cross-Site Scripting

TemaTres 1.3 - searchexpresion Cross-Site Scripting source: https://www.securityfocus.com/bid/47569/info TemaTres is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

TemaTres 1.3 Cross Site Scripting

------------------------------------------------------------------------ Software................TemaTres 1.3 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://sourceforge.net/projects/tematres/ Discovery Date..........4/25/2011...

TemaTres 1.3 - '_search_expresion' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47569/info TemaTres is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

TemaTres Multiple XSS and SQL Injection Vulnerabilities

The host is running TemaTres and is prone to Multiple XSS and SQL Injection Vulnerabilities. OpenVAS Vulnerability Test $Id: gbtematresmultxssnsqlinjvuln.nasl 4892 2016-12-30 15:39:07Z teissa $ TemaTres Multiple XSS and SQL Injection Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009...

TemaTres Version Detection

This script detects the installed version of TemaTres. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TemaTres <= 1.031 Multiple XSS and SQLi Vulnerabilities

TemaTres is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...