Lucene search
+L

4 matches found

Cvelist
Cvelist
•added 2020/01/03 7:57 p.m.•43 views

CVE-2014-5516

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

6.8AI score0.01302EPSS
SaveExploits1References3
CVE
CVE
•added 2020/01/03 7:57 p.m.•184 views

CVE-2014-5516

KonaKart Storefront Application (DS Data Systems) prior to 7.3.0.0 is vulnerable to CSRF protection bypass that allows an attacker to hijack an administrator’s session by issuing a manipulated GET request to change a user email address. The issue is documented in CVE-2014-5516, with a remediation...

6.5CVSS6.7AI score0.01302EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2020/01/03 12:00 a.m.•7 views

PT-2020-7719

Name of the Vulnerable Software and Affected Versions DS Data Systems KonaKart versions prior to 7.3.0.0 Description A cross-site request forgery CSRF issue exists in the Storefront Application, allowing remote attackers to hijack the authentication of administrators for requests that change a us...

6.5CVSS0.01302EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/03 12:00 a.m.•9 views

CVE-2014-5516: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

6.5CVSS6.7AI score0.01302EPSS
SaveExploits1References2
Rows per page
Query Builder