2762 matches found
Improper access control
LG LNB, LND, LNU, and LNV smart network camera devices have broken access control. Attackers are able to download /updownload/t.report aka Log & Report files and download backup files via download.php without authenticating. These backup files contain user credentials and configuration informatio...
CVE-2018-16946
LG LNB, LND, LNU, and LNV smart network camera devices have broken access control. Attackers are able to download /updownload/t.report aka Log & Report files and download backup files via download.php without authenticating. These backup files contain user credentials and configuration informatio...
LG Smart IP Camera 1508190 - Backup File Download
Exploit Title: LG Smart IP Camera 1508190 - Backup File Download Date: 2018-09-11 Exploit Author: Ege Balci Vendor Homepage: https://www.lg.com Software version: 1310250 " exit0 print"==========================================================================" print" Exploit Title: LG Smart IP...
LG Smart IP Camera 1508190 File Disclosure
Exploit Title: LG Smart IP Camera 1508190 - Backup File Download Date: 2018-09-11 Exploit Author: Ege Balci Vendor Homepage: https://www.lg.com Software version: 1310250 " exit0 print"==========================================================================" print" Exploit Title: LG Smart IP...
LG Smart IP Camera 1508190 - Backup File Download
LG Smart IP Camera 1508190 - Backup File Download Exploit Title: LG Smart IP Camera 1508190 - Backup File Download Date: 2018-09-11 Exploit Author: Ege Balci Vendor Homepage: https://www.lg.com Software version: 1310250 " exit0...
CVE-2018-16431
admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account...
CVE-2018-16431
admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account...
PT-2018-13565 · Yfcmf · Yfcmf
Name of the Vulnerable Software and Affected Versions: YFCMF version 3.0 Description: The issue allows for Cross-Site Request Forgery CSRF attacks, enabling an attacker to add an administrator account through the admin/admin/adminsave.html endpoint. Recommendations: For YFCMF version 3.0, conside...
CVE-2018-16380
An issue was discovered in Ogma CMS 0.4 Beta. There is a CSRF vulnerability in users.php?action=createnew that can add an admin account...
Cross site request forgery (csrf)
An issue was discovered in Ogma CMS 0.4 Beta. There is a CSRF vulnerability in users.php?action=createnew that can add an admin account...
CVE-2018-16380
An issue was discovered in Ogma CMS 0.4 Beta. There is a CSRF vulnerability in users.php?action=createnew that can add an admin account...
CVE-2018-16380
CVE-2018-16380 affects Ogma CMS 0.4 Beta. A CSRF in users.php?action=createnew can be exploited to add an administrator account. According to the NVD entry, CVSSv3 base score is 8.8 (HIGH) with network attack vector, low attack complexity, no privileges required, but user interaction required, an...
Gleez CMS 1.2.0 Cross Site Request Forgery
Exploit Title: Gleez CMS 1.2.0 - Cross-Site Request Forgery Add Admin Date: 2018-08-24 Exploit Author: GunEggWang Vendor Homepage: https://gleezcms.org/ Software Link: https://github.com/gleez/cms Version: 1.2.0 CVE : CVE-2018-15845 Description: There is a CSRF vulnerability that can add an...
CVE-2018-15850
An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an administrator account via index.php?page=user...
Cross site request forgery (csrf)
There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add...
CVE-2018-15845
There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add...
CVE-2018-15845
Summary: CVE-2018-15845 is a CSRF vulnerability in Gleez CMS 1.2.0 that allows an attacker to add an administrator account via the admin/users/add endpoint. The issue is documented across multiple feeds (CVE, OSV, CNVD, GitHub advisories, Exploit DB). The root cause is a cross-site request forger...
Vox TG790 ADSL Router - Cross-Site Request Forgery (Add Admin)
Vox TG790 ADSL Router - Cross-Site Request Forgery Add Admin Title: Vox TG790 ADSL Router - Cross-Site Request Forgery Add Admin Author: Cakes Exploit Date: 2018-08-01 Vendor: Vox Telecom Link: https://www.vox.co.za/ Firmware Version: 6.2.W.1 CVE: N/A Description Due to improper session managemen...
Gxlcms Cross-Site Request Forgery Vulnerability
Gxlcms is an enterprise website creation system. A cross-site request forgery vulnerability exists in Gxlcms version 2.0. A remote attacker can exploit this vulnerability to add an administrator account with the help of news/index.php?s=Admin-Admin-Insert URL...