Dell SonicWALL Secure Remote Access Cross-Site Request Forgery Vulnerability

Dell SonicWALL Secure Remote Access is a remote security access solution. A cross-site request forgery vulnerability exists in the Dell SonicWALL Secure Remote Access user portal, which allows remote attackers to construct a special cgi-bin/editBookmark request that hijacks an authenticated user...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the user portal in Dell SonicWALL Secure Remote Access SRA products with firmware before 7.5.1.0-38sv and 8.x before 8.0.0.1-16sv allows remote attackers to hijack the authentication of users for requests that create bookmarks via a crafted request...

CVE-2015-2248

Dell SonicWALL Secure Remote Access (SRA) appliances are affected by CVE-2015-2248 (CSRF in the user portal) affecting firmware prior to 7.5.1.0-38sv and 8.x prior to 8.0.0.1-16sv. The vulnerability enables an attacker to hijack a logged-in user’s authentication to create bookmarks via a crafted ...

Sql injection

SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action...

CVE-2010-4915

CVE-2010-4915 affects ColdGen ColdBookmarks 1.22, with a vulnerability in the index.cfm function where the BookmarkID parameter in an EditBookmark action enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. The issue is tied to improper handling of the BookmarkID in...

ColdBookmarks 1.22 SQL Injection

ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...

ColdBookmarks 1.22 - SQL Injection

ColdBookmarks 1.22 - SQL Injection ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...