1501 matches found
EmpireCMS Cross-Site Request Forgery Vulnerability (CNVD-2019-07938)
EmpireCMS Empire Content Management System is an open source content management system CMS. A cross-site request forgery vulnerability exists in EmpireCMS version 7.5. A remote attacker can exploit this vulnerability to add user accounts...
CVE-2019-9040
S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332...
CVE-2019-9040
S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332...
Cross site request forgery (csrf)
A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit...
CVE-2019-7737
A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit...
CVE-2019-7737
A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit...
The vulnerability of the Partner Detail sub-component of the Oracle Partner Management component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.
The vulnerability of the Partner Detail sub-component of the Oracle Partner Management component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...
The vulnerability of the Cover Letter sub-component of the Oracle Content Manager component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.
The vulnerability of the Cover Letter sub-component of the Oracle Content Manager component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data using the HTTP protocol...
The vulnerability of the Partner Dashboard sub-component of the Oracle Partner Management component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.
The vulnerability of the Partner Dashboard sub-component of the Oracle Partner Management component within the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP...
The vulnerability in the web interface of the Oracle iStore component of the Oracle E-Business Suite, a system for automating business operations, allows a perpetrator to gain access to modify, add, or delete data.
The vulnerability of the web interface of the Oracle iStore component in the Oracle E-Business Suite system for automating business operations is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify,...
Live Call Support Widget 1.5 - Cross-Site Request Forgery Vulnerability
Exploit for php platform in category web applications Exploit Title: Live Call Support 1.5 - Cross-Site Request Forgery Add Admin Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link:...
A protocol error occurred while communicating with the authentication service
Adding Store to Receiver for Windows will fail with below mentioned error message:...
CVE-2018-20613
TEMMOKU T1.09 Beta allows admin/user/add CSRF...
CVE-2018-20612
UWA 2.3.11 allows index.php?g=admin&c=admin&a=addadmindo CSRF...
Null pointer dereference
A NULL pointer dereference was discovered in ifilterbank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the...
CVE-2018-19853
An issue was discovered in hitshop through 2014-07-15. There is an elevation-of-privilege vulnerability that allows control over the whole web site via the admin.php/user/add URI because a storekeeper account which is supposed to have only privileges for commodity management can add an...
CVE-2018-14663
An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record by dnsdist, for example an OPT record when adding EDNS Client Subnet, might result in the trailing data being smuggled to the backend as a...
CVE-2018-19561
sikcms 1.1 has CSRF via admin.php?m=Admin&c=Users&a=userAdd to add an administrator account...