10425 matches found
CVE-2015-6373
CVE-2015-6373 affects Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices. Root cause: CSRF vulnerability due to lack of CSRF protection. Impact: remote attackers could hijack user authentication and perform unwanted actions. Exploitation details: described as unauthe...
D-Link DIR-816L Cross Site Request Forgery
Title: ==== D-link wireless router DIR-816L Cross-Site Request Forgery CSRF vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-5999 Date: ==== 10-11-2015 dd/mm/yyyy Vendor: ====== D-Link is a computer networking company with...
CF Image Host 1.6.6 Cross Site Request Forgery Vulnerability
CF Image Host version 1.6.6 suffers from a cross site request forgery vulnerability. CF Image Host 1.6.6 Cross Site Request Forgery Vulnerability Vendor: ==================================== codefuture.co.uk/projects/imagehost Product: =================================== CF Image Host 1.65 - 1.6....
TestLink 1.9.14 - Cross-Site Request Forgery
TestLink 1.9.14 - Cross-Site Request Forgery Information ================================= Name: CSRF Vulnerability in TestLink 1.9.14 Affected Software: TestLink Affected Versions: 1.9.14 and possibly below Vendor Homepage: http://testlink.org/ Severity: High Status: Fixed Vulnerability Type:...
Quick.Cart 6.6 Cross Site Request Forgery
Security Advisory - Curesec Research Team 1. Introduction Affected Product: Quick.Cart 6.6 Fixed in: not fixed Fixed Version Link: n/a Vendor Contact: [email protected] Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 09/07/2015 Disclosed to public: 10/07/2015 Release mode...
CVE-2015-5534
Multiple cross-site request forgery CSRF vulnerabilities in Oxwall before 1.8 allow remote attackers to hijack the authentication of administrators for requests that 1 put the website under maintenance via the maintenanceenable parameter or 2 conduct cross-site scripting XSS attacks via the...
PHP Server Monitor 3.1.1 Privilege Escalation
Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPSRVMONITOR-PRIV-ESCALATE.txt Vendor: ================================ www.phpservermonitor.org...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attackers to hijack the authentication of arbitrary users...
CVE-2015-5188
CVE-2015-5188 describes a Cross‑Site Request Forgery (CSRF) vulnerability in the Web Console (web-console) of Red Hat JBoss Enterprise Application Platform (EAP) 6.x prior to 6.4.4 and WildFly prior to 2.0.0.CR9. The underlying issue is CSRF via multipart/form-data file uploads, allowing remote a...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function...
Reflected Cross-Site Scripting (XSS) in iTop
Advisory ID: HTB23268 Product: iTop Vendor: Combodo SARL Vulnerable Versions: 2.1.0-2127 and probably prior Tested Version: 2.1.0-2127 Advisory Publication: July 29, 2015 without technical details Vendor Notification: July 29, 2015 Vendor Patch: July 30, 2015 Public Disclosure: September 23, 2015...
W150D Wireless N 150 ADSL2 Modem Router - Cross Site Request Forgery Vulnerability
Document Title: =============== W150D Wireless N 150 ADSL2 Modem Router - Cross Site Request Forgery Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1612 Release Date: ============= 2015-10-06 Vulnerability Laboratory ID VL-ID:...
Radiant CMS v 1.1.4 - CSRF Vulnerability
Exploit for php platform in category web applications Title : Radiant CMS v 1.1.4 - CSRF Exploit Author : ZwX Date : 16/07/2015 Download : http://radiantcms.org/download/ Vendor : http://radiantcms.org/ Level Security : Medium Tested on : Windows 7 +----------------------+ Description & Detail...
CVE-2015-6468
CVE-2015-6468 is a CSRF vulnerability in Resource Data Management’s Web-based Data Manager, affected versions prior to 2.2. The issue enables an attacker to hijack an authenticated user’s session and perform unintended actions on trusted pages via CSRF vectors (details not specified in the provid...
ZeusCart 4.0 - CSRF 漏洞
No description provided by source. document.myform.submit;...
ZeusCart 4.0 - SQL Injection / CSRF Vulnerability
Exploit for php platform in category web applications ZeusCart 4.0: SQL Injection Security Advisory – Curesec Research Team 1. Introduction Affected Product: ZeusCart 4.0 Fixed in: not fixed Fixed Version Link: n/a Vendor Contact: email protected Vulnerability Type: SQL Injection Remote...
CVE-2015-6827
Cross-site request forgery CSRF vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentication of users for requests that change a password via a request to signup.php...
CVE-2015-6827
CVE-2015-6827 describes a Cross-Site Request Forgery (CSRF) in Auto-Exchanger 5.1.0 that allows an attacker to hijack a user’s session and cause a password change by sending a request to signup.php. The vulnerability affects Auto-Exchanger 5.1.0 and is publicly discussed in multiple sources (e.g....