112 matches found
MDT AutoSave SQL注入漏洞
MDT AutoSave is a software application. It provides an automated change management function. MDT AutoSave suffers from a SQL injection vulnerability that originates from an attacker being able to utilize SQL commands to create a new user on the system and update the user's privileges, granting th...
MDT AutoSave 操作系统操作系统命令注入漏洞
MDT AutoSave is a software application. It provides an automated change management function. An operating system command injection vulnerability exists in MDT AutoSave, which stems from the application's API not validating data data effectively, allowing an attacker to execute system commands by...
Denial Of Service (DoS) Through Disk Consumption
Moodle is vulnerable to denial of service DoS attacks. A malicious user with the guest role can create multiple big drafts with the Atto module's editor-autosave feature to cause the system to run out of disk space...
PHPOK V4.5.031 \framework\model\wealth.php wealth_autosave() function has SQL injection vulnerability
PHPOK is a website building system to achieve highly customized open source free website building system. A SQL injection vulnerability exists in the phpok version 4.5.031 \framework\model\wealth.php wealthautosave function. Allows an attacker to exploit the vulnerability to obtain sensitive...
CVE-2015-5332
Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service disk consumption by leveraging the guest role and entering drafts with the editor-autosave feature...
CVE-2012-2097
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
CVE-2012-2097
CVE-2012-2097 describes a Cross-site request forgery (CSRF) vulnerability in the Drupal Autosave module. Affects: Autosave 6.x versions prior to 6.x-2.10 and 7.x versions prior to 7.x-2.0. Root cause: insufficient protection against submission of saved results to a node, enabling remote attackers...
CVE-2012-2097
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
SA-CONTRIB-2012-059 - Autosave - Cross Site Request Forgery
CVE: CVE-2012-2097 This module enables snapshots of your node edit form to be saved in the background while you are editing to help prevent the data from being lost. The module doesn't sufficiently protect against a user being tricked into submitting saved results to a node. Versions affected...
Wordpress 2.7.0 admin remote code execution vulnerability-vulnerability warning-the black bar safety net
by Ryatpuretot mail: puretot at gmail dot com team: http://www.80vul.com date: 2008-12-18 Analysis: This vulnerability out in the background: wp-admin/post.php if currentusercan'editpost', $postID if $last = wpcheckpostlock $post-ID $lastuser = getuserdata $last ; $lastusername = $lastuser ?...
