2132 matches found
Kanboard Design Vulnerability (CNVD-2017-30947)
Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...
Kanboard Design Vulnerability (CNVD-2017-30939)
Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...
EMC CMCNE 11.2.1 - FileUploadController Remote Code Execution (Metasploit)
require 'msf/core' class MetasploitModule 'EMC CMCNE FileUploadController Remote Code Execution', 'Description' = %q This module exploits a fileupload vulnerability found in EMC Connectrix Manager Converged Network Edition MSFLICENSE, 'Author' = 'james fitts' , 'References' = 'ZDI', '13-279' ,...
Kanboard Password Reset Vulnerability (CNVD-2017-28605)
Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.46. An...
Kanboard Password Reset Vulnerability
Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.46. The...
kanboard -- multiple privilege escalation vulnerabilities
chbi reports: an authenticated standard user could reset the password of another user including admin by altering form data...
CVE-2017-12851
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12850
An authenticated standard user could reset the password of other users including the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12850
An authenticated standard user could reset the password of other users including the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12851
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12851
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12851
CVE-2017-12851 affects Kanboard prior to 1.0.46. An authenticated standard user could reset the administrator password by altering form data in the request, exposing a password‑reset vulnerability in the admin account. Remediation guidance found in public references suggests upgrading to a fixed ...
CVE-2017-12850
CVE-2017-12850 affects Kanboard prior to 1.0.46. An authenticated standard user could reset the password of other users (including the admin) by altering form data. Impact is privilege escalation within Kanboard; connected sources reference the Kanboard commit and CVE coverage. Remediation: upgra...
CVE-2017-12850
An authenticated standard user could reset the password of other users including the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12850
An authenticated standard user could reset the password of other users including the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12851
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12850
An authenticated standard user could reset the password of other users including the admin by altering form data. Affects kanboard before 1.0.46...
PT-2017-12726
Name of the Vulnerable Software and Affected Versions kanboard versions prior to 1.0.46 Description The issue allows an authenticated standard user to reset the admin's password by modifying form data. Recommendations For versions prior to 1.0.46, update to version 1.0.46 or later to resolve the...
Websites Grabbing User-Form Data Before It's Submitted
Websites are sending information prematurely: ...we discovered NaviStone's code on sites run by Acurian, Quicken Loans, a continuing education center, a clothing store for plus-sized women, and a host of other retailers. Using Javascript, those sites were transmitting information from people as...
