CVE-2013-7473

Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account...

Cross site request forgery (csrf)

Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account...

CVE-2013-7473

Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account...

CVE-2013-7473

Windu CMS 2.2 is affected by a CSRF vulnerability that allows an attacker to add an admin account via admin/users/?mn=admin.message.error. The connected sources confirm the scenario but do not provide a concrete remediation or patched version in the provided documents. Exploitation status or in-t...

CVE-2013-7473: Cross-Site Request Forgery (CSRF)

Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account...

Rancher Labs Rancher Unspecified Vulnerability

Rancher Labs Rancher is the United States Rancher Labs, Inc. of a set of open source enterprise-class container management platform. Rancher Labs Rancher has a security vulnerability that originates from a default administrator account with a default password created by the program when it is fir...

Critical Flaws in 'OXID eShop' Software Expose eCommerce Sites to Hacking

If your e-commerce website runs on the OXID eShop platform , you need to update it immediately to prevent your site from becoming compromised. Cybersecurity researchers have discovered a pair of critical vulnerabilities in OXID eShop e-commerce software that could allow unauthenticated attackers ...

Cross site request forgery (csrf)

OECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery CSRF. The impact is: The victim clicks on adding an administrator account. The component is: admincp.php. The attack vector is: network connectivity. The fixed version is: v4.3...

CVE-2019-1010112: Cross-Site Request Forgery (CSRF)

OECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery CSRF. The impact is: The victim clicks on adding an administrator account. The component is: admincp.php. The attack vector is: network connectivity. The fixed version is: v4.3...

UACME - Defeating Windows User Account Control

Defeating Windows User Account Control by abusing built-in Windows AutoElevate backdoor. System Requirements x86-32/x64 Windows 7/8/8.1/10 client, some methods however works on server version too. Admin account with UAC set on default settings required. Usage Run executable from command line:...

Security Bulletin: IBM Robotic Process Automation uses a PostgreSQL admin account for accessing the application database (CVE-2019-4298)

Summary IBM Robotic Process Automation uses a PostgreSQL admin account for accessing the application database. Vulnerability Details CVEID: CVE-2019-4298 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere uses a high privileged PostgreSQL account for database access which could...

CVE-2019-9958

CSRF within the admin panel in Quadbase EspressReport ES ERES v7.0 update 7 allows remote attackers to escalate privileges, or create new admin accounts by crafting a malicious web page that issues specific requests, using a target admin's session to process their requests...

CVE-2019-9958

The CVE-2019-9958 entry affects Quadbase EspressReport ES (ERES) v7.0 update 7, where a CSRF flaw in the admin panel allows remote attackers to escalate privileges or create new admin accounts by coercing an authenticated admin’s session to perform unintended requests. The vulnerability arises fr...

PT-2019-19957 · E Press · Espressreport Es

Name of the Vulnerable Software and Affected Versions: EspressReport ES ERES version 7.0 update 7 Description: The issue allows remote attackers to escalate privileges or create new admin accounts by crafting a malicious web page that issues specific requests, using a target admin's session to...

CVE-2018-17387

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

CVE-2018-17387

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

Cross site request forgery (csrf)

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

CVE-2018-17389

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account...

CVE-2018-17389

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account...

Cross site request forgery (csrf)

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account...