EUVD-2019-7930

Malware in sbrugna...

EUVD-2019-7931

Malware in sbrugna...

Unspecified Vulnerability in eyecomms eyeCMS

eyecomms eyeCMS is a content management system CMS from eyecomms Oman. A security vulnerability exists in eyecomms eyeCMS 2019-10-15 and earlier versions. An attacker can exploit the vulnerability to take control of other user accounts...

CVE-2019-17604

An Insecure Direct Object Reference IDOR vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal information first name, last name, email, CV, phone number, and all other personal information by changing the value of the candidate id the id...

Design/Logic Flaw

An Insecure Direct Object Reference IDOR vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal information first name, last name, email, CV, phone number, and all other personal information by changing the value of the candidate id the id...

CVE-2019-17604

CVE-2019-17604 is an Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS up to 2019-10-15. An attacker can modify the id parameter to change other candidates’ personal information (e.g., first name, last name, email, CV, phone, etc.). The related Red Hat CVE-2019-17604 entry ...

PT-2019-15224

Name of the Vulnerable Software and Affected Versions eyecomms eyeCMS versions prior to 2019-10-15 Description The issue allows any candidate to modify other candidates' personal information, including first name, last name, email, CV, phone number, and other details, by altering the id parameter...

PT-2019-15225

Name of the Vulnerable Software and Affected Versions eyecomms eyeCMS versions prior to 2019-10-15 Description A mass assignment issue allows any candidate to take over another candidate's account by exploiting a modified candidate id and an additional password parameter, resulting in the passwor...

CVE-2019-17604: Authorization Bypass Through User-Controlled Key

An Insecure Direct Object Reference IDOR vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal information first name, last name, email, CV, phone number, and all other personal information by changing the value of the candidate id the id...