4581 matches found
Code injection
The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2012-4609
CVE-2012-4609 affects RSA NetWitness Informer web interface prior to version 2.0.5.6. The issue is a clickjacking vulnerability in the web interface that could be exploited via unspecified vectors to trick an authenticated user into executing actions. The ESA-2012-052 advisory and Red Hat/Securit...
CVE-2012-4609
The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2012-4609: Improper Input Validation
The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
PT-2012-5513
Name of the Vulnerable Software and Affected Versions EMC RSA NetWitness Informer versions prior to 2.0.5.6 Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors, affecting the web interface. Recommendations For versions prior to 2.0.5.6, update to...
CVE-2012-2246
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php...
Cross site request forgery (csrf)
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php...
CVE-2012-2246
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php...
CVE-2012-2246
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php...
CVE-2012-2246
CVE-2012-2246 affects Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4. The issue allows remote attackers to perform clickjacking and bypass CSRF protections to delete arbitrary users via account/delete.php. The vulnerability is described in the standard CVE details and is tied to Mahara deployme...
CVE-2012-2246: Improper Input Validation
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php...
PT-2012-3904
Name of the Vulnerable Software and Affected Versions Mahara versions 1.4.x through 1.4.4 Mahara versions 1.5.x through 1.5.3 Description The issue allows remote attackers to conduct clickjacking attacks, enabling them to delete arbitrary users and bypass CSRF protection via the...
Code injection
The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element...
CVE-2012-4936
The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element...
CVE-2012-4936
The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element...
CVE-2012-4936
CVE-2012-4936 concerns Pattern Insight 2.3, whose web interface is vulnerable to clickjacking via a FRAME element. The CVE description from NVD states that remote attackers can conduct clickjacking against the Pattern Insight web interface, with the effect of framing the application and potential...
CVE-2012-4936: Undefined Security Weakness
The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element...
PT-2012-5670
Name of the Vulnerable Software and Affected Versions Pattern Insight version 2.3 Description The issue allows remote attackers to conduct clickjacking attacks via a FRAME element in the web interface. Recommendations For Pattern Insight version 2.3, consider disabling the web interface or...