8 matches found
EUVD-2014-3803
Malware in sbrugna...
UserCake 1.3 Cross Site Scripting / Information Disclosure
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...
CVE-2014-3866
Multiple cross-site request forgery CSRF vulnerabilities in usersettings.php in Usercake 2.0.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that change the 1 administrative password via the passwordc parameter or 2 administrative e-mail address vi...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in usersettings.php in Usercake 2.0.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that change the 1 administrative password via the passwordc parameter or 2 administrative e-mail address vi...
CVE-2014-3866
Multiple cross-site request forgery CSRF vulnerabilities in usersettings.php in Usercake 2.0.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that change the 1 administrative password via the passwordc parameter or 2 administrative e-mail address vi...
CVE-2014-3866
CVE-2014-3866 documents CSRF vulnerabilities in the Admin settings flow of Usercake
PT-2014-5563
Name of the Vulnerable Software and Affected Versions Usercake versions 2.0.2 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the passwordc parameter or the administrative e-mail...
CVE-2014-3866: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in usersettings.php in Usercake 2.0.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that change the 1 administrative password via the passwordc parameter or 2 administrative e-mail address vi...