Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Saint Systems Disable User Login.This issue affects Disable User Login: from n/a through 1.3.7...

CVE-2023-47806 WordPress Disable User Login Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Saint Systems Disable User Login.This issue affects Disable User Login: from n/a through 1.3.7...

CVE-2023-47806

The CVE-2023-47806 entry concerns the WordPress plugin Disable User Login. A CSRF vulnerability exists due to the absence of a CSRF check in the plugin’s bulk action, allowing an attacker to cause unintended actions on a user’s account. Affected versions are 1.3.7 and earlier, with fixes introduc...

Remote Code Execution

org.apache.streampark, streampark is vulnerable to Remote Code Execution. The vulnerability is caused due to a missing check on the compilation parameters of maven used in a project module that is used to integrate Maven's compilation capability. This can lead to an attacker inserting remote...

WordPress Plugin Disable User Login Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-30617 · Unknown · Disable User Login

Name of the Vulnerable Software and Affected Versions: Disable User Login versions 1.3.7 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Disable User Login feature. This allows an attacker to perform unintended actions on a user's account. Recommendations: For version...

DOM-XSS on Backoffice login screen.

Impact Cross-site scripting XSS enable attackers to bring malicious content into a website or application. Explanation of the vulnerability A DOM-XSS can be exploited when users are successfully logging into the Backoffice...

Error event ID 5002 recorded on StoreFront server

When starting Citrix Workspace, the User Name and Password inputs are not displayed. Restarting StoreFront temporarily resolves the issue. The following error event log was recorded in the StoreFront Event Viewer. Event ID 5002, Application Pool Citrix Delivery Services Authentication has been...

PT-2023-31119 · Ruckus · Zonedirector +3

Name of the Vulnerable Software and Affected Versions: Ruckus Access Point products ZoneDirector, SmartZone, and AP Solo affected versions not specified Description: A cross-site-scripting issue exists in the products, allowing an arbitrary script to be executed on the user's web browser during...

CVE-2023-47645

Cross-Site Request Forgery CSRF vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login allows Cross Site Request Forgery.This issue affects RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User...

CVE-2023-47645

Cross-Site Request Forgery CSRF vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login allows Cross Site Request Forgery.This issue affects RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User...

CVE-2023-47645

CVE-2023-47645 concerns the RegistrationMagic WordPress plugin. A CSRF vulnerability affects RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login, with exposure noted for versions n/a through 5.2.2.6. Public references document the vulnerability and list a pat...

Insufficient Session Expiration

Cosmos-server is vulnerable to Insufficient Session Expiration. The vulnerability is due to the authorization header Jwttoken used for user login remaining valid and not expiring after log out. This allows an attacker to use the token to gain unauthorized access to the application/system even aft...

Mars: Critical Unauthenticated Access to Sensitive Employee and Customer Data Including Invoice Details at ████

During a reconnaissance phase, a directory named 'SSO' was discovered on the website ████████. Upon accessing this directory, it redirected to ██████████, where sensitive employee and customer data, including usernames, emails, purchase history, payment history, bills, phone numbers, customer...

PYSEC-2023-244

Apache Software Foundation Apache Submarine has an SQL injection vulnerability when a user logs in. This issue can result in unauthorized login. Now we have fixed this issue and now user must have the correct login to access workbench. This issue affects Apache Submarine: from 0.7.0 before...

WordPress Disable User Login Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Disable User Login Type Plugin Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47806 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 72a5f66a3130 Credits qilin99 Required...

VulnCheck KEV: CVE-2020-22165

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2023-47164

Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product...

CVE-2023-47164

Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product...

CVE-2023-40851

CVE-2023-40851 affects Phpgurukul’s User Registration & Login and User Management System with admin panel 3.0. The vulnerability is a Cross Site Scripting (XSS) flaw in the user registration page, where attacker-controlled inputs in fname, lname, email, or contact can lead to arbitrary code execu...