CVE-2010-3603

Cross-site request forgery CSRF vulnerability in the file manager service Services/FileService.ashx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by causing the user.config file to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the file manager service Services/FileService.ashx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by causing the user.config file to...

CVE-2010-3603

CVE-2010-3603 is a CSRF vulnerability in mojoPortal 2.3.4.3 and 2.3.5.1, affecting the file manager (Services/FileService.ashx). The issue allows remote attackers to hijack administrator authentication to rename arbitrary files (e.g., moving user.config), causing service disruption (DoS) and pote...

Heap overflow

Heap-based buffer overflow in Open File Manager service ofmnt.exe in St. Bernard Open File Manager 9.5 allows remote attackers to execute arbitrary code via a long request...