CVE-2018-8979

Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI...

CVE-2018-8979

Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI...

PT-2018-18757

Name of the Vulnerable Software and Affected Versions Open-AudIT Professional version 2.1 Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can be used to modify user accounts or inject XSS sequences. This can be achieved by manipulating the credentials URI...

CVE-2018-8979: Improper Neutralization of Input During Web Page Generation

Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI...