CVE-2012-1415

Cross-site request forgery CSRF vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout...

CVE-2012-1415

DFLabs PTK is affected by a CSRF in lib/logout.php affecting PTK 1.0.5 and earlier. The vulnerability allows remote attackers to hijack the authentication of administrators or investigators to trigger a logout. Root cause is CSRF in the logout request; versions prior to 1.0.5 are impacted. Public...

CVE-2012-1415

Cross-site request forgery CSRF vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout...

CVE-2012-5902

Cross-site scripting XSS vulnerability in ptk/lib/modalbookmark.php in DFLabs PTK 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the arg4 parameter...

CVE-2012-5902

The CVE-2012-5902 entry relates to a Cross-site Scripting (XSS) vulnerability in DFLabs PTK 1.0.5, specifically in the file ptk/lib/modal_bookmark.php where arbitrary web script/HTML can be injected via the arg4 parameter. The description consistently identifies the affected component and payload...