110 matches found
Denial Of Service (DoS) Through Disk Consumption
Moodle is vulnerable to denial of service DoS attacks. A malicious user with the guest role can create multiple big drafts with the Atto module's editor-autosave feature to cause the system to run out of disk space...
PHPOK V4.5.031 \framework\model\wealth.php wealth_autosave() function has SQL injection vulnerability
PHPOK is a website building system to achieve highly customized open source free website building system. A SQL injection vulnerability exists in the phpok version 4.5.031 \framework\model\wealth.php wealthautosave function. Allows an attacker to exploit the vulnerability to obtain sensitive...
CVE-2015-5332
Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service disk consumption by leveraging the guest role and entering drafts with the editor-autosave feature...
CVE-2012-2097
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
CVE-2012-2097
Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...
CVE-2012-2097
CVE-2012-2097 describes a Cross-site request forgery (CSRF) vulnerability in the Drupal Autosave module. Affects: Autosave 6.x versions prior to 6.x-2.10 and 7.x versions prior to 7.x-2.0. Root cause: insufficient protection against submission of saved results to a node, enabling remote attackers...
SA-CONTRIB-2012-059 - Autosave - Cross Site Request Forgery
CVE: CVE-2012-2097 This module enables snapshots of your node edit form to be saved in the background while you are editing to help prevent the data from being lost. The module doesn't sufficiently protect against a user being tricked into submitting saved results to a node. Versions affected...
Wordpress 2.7.0 admin remote code execution vulnerability-vulnerability warning-the black bar safety net
by Ryatpuretot mail: puretot at gmail dot com team: http://www.80vul.com date: 2008-12-18 Analysis: This vulnerability out in the background: wp-admin/post.php if currentusercan'editpost', $postID if $last = wpcheckpostlock $post-ID $lastuser = getuserdata $last ; $lastusername = $lastuser ?...
