65 matches found
PT-2019-12319
Name of the Vulnerable Software and Affected Versions Django CRM version 0.2.1 Description The issue affects the Django CRM, where multiple CSRF problems exist. These issues are found in various API endpoints, including "/change-password-by-admin/", "/api/settings/add/", "/cases/create/",...
CVE-2018-8096
Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass with the attacker obtaining admin access via '"Name":"isauthenticationenabled","Value":false' in an api/settings/setting-isauthenticationenabled PUT request...
CVE-2018-8096: Improper Authentication
Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass with the attacker obtaining admin access via '"Name":"isauthenticationenabled","Value":false' in an api/settings/setting-isauthenticationenabled PUT request...
PT-2018-18427
Name of the Vulnerable Software and Affected Versions: Datalust Seq versions prior to 4.2.605 Description: The issue allows for authentication bypass, enabling an attacker to obtain admin access. This can be achieved by sending a PUT request to the "api/settings/setting-isauthenticationenabled"...
