3 matches found
PT-2019-15974
Name of the Vulnerable Software and Affected Versions Xerox AltaLink C8035 printers affected versions not specified Description The issue allows for Cross-Site Request Forgery CSRF attacks. It involves making a request to add users via the Device User Database form field to the "xerox.set" URI. T...
CVE-2019-19832: Cross-Site Request Forgery (CSRF)
Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. The frmUserName value must have a unique name...
CVE-2007-4095: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...