349 matches found
Cross-Site Request Forgery (CSRF)
phpmyfaq is vulnerable to cross-site request forgery CSRF attacks. The application has no CSRF protections when adding a glossary, allowing a malicious user to send a request to edit the glossary...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33499)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33502)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
CVE-2017-15735
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for modifying a glossary...
Cross site request forgery (csrf)
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for modifying a glossary...
CVE-2017-15729
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for adding a glossary...
CVE-2017-15735
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for modifying a glossary...
CVE-2017-15729
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for adding a glossary...
Cross site request forgery (csrf)
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for adding a glossary...
CVE-2017-15735
CVE-2017-15735 affects phpMyFAQ prior to 2.9.9, with a CSRF vulnerability that allows modification of glossary items. Multiple connected sources document CSRF for glossary updates (including PoC showing a form POST to admin/index.php?action=updateglossary while authenticated). The root cause desc...
CVE-2017-15729
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for adding a glossary...
CVE-2017-15735
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for modifying a glossary...
vie-publique.fr XSS vulnerability
Vulnerable URL: http://www.vie-publique.fr/spip.php?page=glossairealphaα='"/alert/OPENBUGBOUNTY/...
Cross-Site Request Forgery (CSRF)
Moodle is vulnerable to cross-site request forgery CSRF attacks. The application does not check for a session key in the Glossary module, allowing a malicious user to hijack the authentication of other users through editcategories.html and editcategories.php...
ritecode.com XSS vulnerability
Vulnerable URL: http://www.ritecode.com/glossary/glossary.php?letter=1/-///'/"//--...
businesscol.com XSS vulnerability
Vulnerable URL: http://www.businesscol.com/productos/glosarios/contable/glossary.php?word=1/-///'/"//--...
Weblate: CSV Injection with the CVS export feature - Glossary
Hi, The "Download as a CSV" feature of Weblate does not properly "escape" fields. Here is more information about this issue: http://www.contextis.com/resources/blog/comma-separated-vulnerabilities/ Here is one method to reproduce this issue: 1 I can add new information in Glossary with a name...
Joomla Glossary 1.6 SQL Injection
@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...
joomunited SEO Glossary ,pre 2.2.4,Other
joomunited SEO Glossary , pre 2.2.4,Other Developer statement in mass email to registered users We just fixed an SEO Glossary vulnerability, an update to version 2.2.4 is required as soon as possible. https://www.joomunited.com/changelog/seo-glossary-changelog Fix informed by user...
