Cross site request forgery (csrf)

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF...

CVE-2018-14964

An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page...

CVE-2018-14964: Improper Neutralization of Input During Web Page Generation

An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page...

CVE-2018-14965: Cross-Site Request Forgery (CSRF)

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF...

CVE-2018-14966: Cross-Site Request Forgery (CSRF)

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF...

PT-2018-12843

Name of the Vulnerable Software and Affected Versions EMLsoft version 5.4.5 Description An issue was discovered that allows Cross-Site Request Forgery CSRF on the "eml/upload/eml/?action=user&do=add" API endpoint. Recommendations For EMLsoft version 5.4.5, consider implementing CSRF protection...

PT-2018-12842

Name of the Vulnerable Software and Affected Versions EMLsoft version 5.4.5 Description An issue was discovered that allows Cross-Site Request Forgery CSRF on the "eml/upload/eml/?action=address&do=add" API endpoint. Recommendations For EMLsoft version 5.4.5, consider implementing CSRF protection...

PT-2018-12841

Name of the Vulnerable Software and Affected Versions EMLsoft version 5.4.5 Description A security issue was found in the software, where a Cross-Site Scripting XSS attack can be performed. This issue is related to the "eml/upload/eml/?action=address&do=edit" page, which is an API endpoint...