10425 matches found
WordPress Plugin SolveMedia 1.1.0 - Cross-Site Request Forgery
Exploit Title: WordPress SolveMedia 1.1.0 CSRF Vulnerability Release Date: 24/01/13 Author: Junaid Hussain - illSecure Research Group - Contact: [email protected] | Website: http://illSecure.com Software Link: http://downloads.wordpress.org/plugin/solvemedia.1.1.0.zip Vendor Homepage:...
CSRF on jmx-console allows invocation of operations on mbeans
Cross-site request forgery CSRF vulnerability in the JMX Console jmx-console in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that...
CSRF on jmx-console allows invocation of operations on mbeans
Cross-site request forgery CSRF vulnerability in the JMX Console jmx-console in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that...
CVE-2012-6518
CVE-2012-6518 is a CSRF vulnerability affecting DiY-CMS 1.0, where mod.php allows attackers to hijack administrator authentication by crafting requests to the poll module’s add action. The issue arises from insufficient CSRF protections in the poll creation workflow, enabling unauthorized actions...
RHEL 5 : Red Hat Network Satellite server spacewalk-java (RHSA-2011:0879)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0879 advisory. Red Hat Network RHN Satellite provides a solution to organizations requiring absolute control over and privacy of the maintenance and package...
Nexpose Security Console CSRF Vulnerability
Exploit for multiple platform in category web applications Product: Nexpose Security Console Vendor: Rapid7 Version: //document.forms0.submit; //uncomment to auto-submit /code 2. Lure victim to http://attackersite.com/nexpose-csrf.htm. 3. Site with ID 1...
Nexpose Security Console Cross Site Request Forgery
Product: Nexpose Security Console Vendor: Rapid7 Version: //document.forms0.submit; //uncomment to auto-submit /code 2. Lure victim to http://attackersite.com/nexpose-csrf.htm. 3. Site with ID 1 is deleted when form is submitted. Vendor Notified: Yes Vend...
160By2 / Way2SMS Cross Site Request Forgery
Cross Site Request Forgery CSRF Vulnerability in Top Online-based SMS sending service websites 160By2.com and Way2SMS.com. The Security flaw in 160By2 allows hackers to send sms from victim account. This Security flaw in Way2Sms hacker to change the name, dob and other details of the victim with ...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in e107admin/newspost.php in e107 1.0.1 allows remote attackers to hijack the authentication of administrators for requests that conduct XSS attacks via the newstitle parameter in a create action...
WordPress Photo Plus / Photo Search XSS / CSRF
Exploit Title: Word Press Photo Plus, Photo Search XSS/CSRF Vulnerability Google Dork: Date: 29/12/12 Exploit Author: k3170makan Vendor Homepage: http://wordpress.org/extend/plugins/wp-photo-album-plus/ Software Link: http://wordpress.org/extend/plugins/wp-photo-album-plus/ Version: 4.8.11 Tested...
Symantec Messaging Gateway Save.do Cross Site Request Forgery (CVE-2012-0308)
A cross-site request forgery CSRF vulnerability has been reported in Symantec Messaging Gateway. The vulnerability is due to errors while validating user input. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted URI. Successful exploitation would allow...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase...
CVE-2012-5622
Cross-site request forgery CSRF vulnerability in the management console openshift-console/app/controllers/applicationcontroller.rb in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors...
CVE-2012-5622
Cross-site request forgery CSRF vulnerability in the management console openshift-console/app/controllers/applicationcontroller.rb in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors...
Snare for Linux Cross-Site Request Forgery
Snare for Linux Cross-Site Request Forgery I. BACKGROUND ---------------------- Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating system. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and storage. II...
PHP-Nuke 8.2.4 - Cross-Site Request Forgery
Exploit Title:CSRF vulnerability Author: sajith version: PHP Nuke 8.2.4 vulnerable app link:http://phpnuke.org/modules.php?name=Release CSRF add group CSRF POC PHP nuke 8.2.4 document.getElementById'formid'.submit;...
Jahia Enterprise v6.6.0.0 CSRF Vulnerability
Exploit for jsp platform in category web applications A.B.C.D = URL, EXAMPLE: http://localhost:8080/cms/en/users/root.changePassword.do CSRF Exploit to change Password 0day.today 2018-03-20...
CVE-2012-5549
Cross-site request forgery CSRF vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2012-5450
Cross-site request forgery CSRF vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple CMSMS 1.11.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deld parameter...
CVE-2012-5549
CVE-2012-5549 : CSRF vulnerability in the Drupal contributed Time Spent module (6.x/7.x) allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. The Time Spent module had insufficient input sanitization, affecting all versions. Drupal core is not affected....