78 matches found
Cross site request forgery (csrf)
Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password...
Cross site scripting
Adive Framework 2.0.8 has admin/user/add userName XSS...
CVE-2020-7989
Adive Framework 2.0.8 has admin/user/add userUsername XSS...
CVE-2020-7991
Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password...
CVE-2020-7989
Adive Framework 2.0.8 has admin/user/add userUsername XSS...
CVE-2020-7989
Mode C (Normal) — CVE-2020-7989 affects Adive Framework 2.0.8, with a Cross-Site Scripting flaw in the admin/user/add userUsername path. Root cause cited in CNVD entry: lack of proper validation of client-side data by the web application. Documented impact includes XSS exposure, with NVD indicati...
CVE-2020-7989
Adive Framework 2.0.8 has admin/user/add userUsername XSS...
CVE-2020-7990
Adive Framework 2.0.8 has admin/user/add userName XSS...
CVE-2020-7990
The CVE-2020-7990 entry concerns Adive Framework 2.0.8, where an admin/user/add userName XSS vulnerability exists. The core issue is a cross-site scripting flaw arising from insufficient validation of client-side data in the Adive Framework web application. Multiple connected sources (including R...
CVE-2020-7990
Adive Framework 2.0.8 has admin/user/add userName XSS...
CVE-2020-7991
Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password...
CVE-2020-7991
Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password...
CVE-2020-7991
The CVE-2020-7991 entry refers to Adive Framework 2.0.8, where a Cross-Site Request Forgery (CSRF) vulnerability exists in the admin/config area that can change the Administrator password. Multiple connected sources confirm the affected software/version and the admin password impact, with exploit...
PT-2020-19903 · Adive · Adive Framework
Name of the Vulnerable Software and Affected Versions: Adive Framework version 2.0.8 Description: The issue allows for a CSRF attack in the admin/config section, enabling an attacker to change the Administrator password. Recommendations: For Adive Framework version 2.0.8, update to a version that...
CVE-2020-7989: Improper Neutralization of Input During Web Page Generation
Adive Framework 2.0.8 has admin/user/add userUsername XSS...
CVE-2020-7990: Improper Neutralization of Input During Web Page Generation
Adive Framework 2.0.8 has admin/user/add userName XSS...
PT-2020-19902
Name of the Vulnerable Software and Affected Versions Adive Framework version 2.0.8 Description The issue concerns an XSS vulnerability related to the userName variable in the admin/user/add endpoint. This allows for potential exploitation. Recommendations For Adive Framework version 2.0.8,...
PT-2020-19901
Name of the Vulnerable Software and Affected Versions Adive Framework version 2.0.8 Description The issue concerns an XSS vulnerability in the userUsername parameter of the admin/user/add endpoint. This allows for potential exploitation. Recommendations For Adive Framework version 2.0.8, as a...
CVE-2020-7991: Cross-Site Request Forgery (CSRF)
Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password...
Adive Framework 2.0.8 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Adive Framework 2.0.8 - Persistent Cross-Site Scripting Exploit Author: Sarthak Saini Vendor Link : https://www.adive.es/ Software Link: https://github.com/ferdinandmartin/adive-php7 Version: 2.0.8 Category: Webapps Tested on:...