5 matches found
CVE-2023-27073
A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...
CVE-2023-27073
A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...
CVE-2023-27073: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...
PT-2018-13280
Name of the Vulnerable Software and Affected Versions e107 version 2.1.8 Description The issue allows for Cross-Site Request Forgery CSRF attacks in the 'usersettings.php' file, enabling an attacker to change user details, including passwords, for all users, including administrators...
USN-17-1: passwd vulnerability
Martin Schulze and Steve Grubb discovered a flaw in the authentication input validation of the "chfn" and "chsh" programs. This allowed logged in users with an expired password to change their real name and their login shell without having to change their password. This flaw cannot lead to...