Lucene search
+L

3078 matches found

Atlassian
Atlassian
added 2012/04/19 4:29 a.m.23 views

admin/migratelocalgroups.jsp Atlassian Local Group Migration Recovery lacks an XSRF token to run the migration

admin/migratelocalgroups.jsp Atlassian Local Group Migration Recovery does not require a csrf token to run the migration. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...

2.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2012/04/19 4:29 a.m.26 views

admin/migratelocalgroups.jsp Atlassian Local Group Migration Recovery lacks an XSRF token to run the migration

admin/migratelocalgroups.jsp Atlassian Local Group Migration Recovery does not require a csrf token to run the migration. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...

2.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2012/04/19 1:22 a.m.21 views

admin/createMissingPersonalInfo.jsp lacks an XSRF token to trigger "build Personal Information objects"

admin/createMissingPersonalInfo.jsp doesn't require a csrf token to trigger "build Personal Information objects". When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...

2.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2012/04/19 1:22 a.m.21 views

admin/createMissingPersonalInfo.jsp lacks an XSRF token to trigger "build Personal Information objects"

admin/createMissingPersonalInfo.jsp doesn't require a csrf token to trigger "build Personal Information objects". When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...

2.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2012/04/19 1:14 a.m.23 views

admin/fixCaseInSpacePermissions.jsp lacks an XSRF token to 'fix the case of your space permissions'

admin/fixCaseInSpacePermissions.jsp does not require a csrf token to 'fix the case of your space permissions'. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...

1.8AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2012/04/19 1:14 a.m.26 views

admin/fixCaseInSpacePermissions.jsp lacks an XSRF token to 'fix the case of your space permissions'

admin/fixCaseInSpacePermissions.jsp does not require a csrf token to 'fix the case of your space permissions'. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...

1.8AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2012/04/19 1:12 a.m.25 views

restructureattachments.jsp Triggering off a Restructure job lacks an XSRF token

In restructureattachments.jsp Triggering off a Restructure job does not require a csrf token. To trigger it just send a POST to the page with the following post data: 'action:Restructure'. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to...

1.6AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2012/04/19 1:12 a.m.23 views

restructureattachments.jsp Triggering off a Restructure job lacks an XSRF token

In restructureattachments.jsp Triggering off a Restructure job does not require a csrf token. To trigger it just send a POST to the page with the following post data: 'action:Restructure'. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to...

1.6AI score
SaveExploits0Affected Software1
Cent OS
Cent OS
added 2012/04/11 8:13 p.m.90 views

tomcat6 security update

CentOS Errata and Security Advisory CESA-2012:0475 Updated tomcat6 packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

5CVSS6.1AI score0.79713EPSS
SaveExploits7References7
RedHat Linux
RedHat Linux
added 2012/04/11 5:12 p.m.59 views

Moderate: Red Hat Security Advisory: tomcat5 security update

Updated tomcat5 packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

5CVSS6.1AI score0.79713EPSS
SaveExploits7References4
myhack58
myhack58
added 2012/04/09 12:00 a.m.14 views

DeepSoft. com. sys. Servlet upload vulnerability-vulnerability warning-the black bar safety net

Author:hackdn Reprinted indicate the JSP+MSSQL system, foreign wide application, in registered upload, the filter is not strict, modify the following POST, upload JSP link rel=stylesheet href="/rs/rs. css" html body topmargin=1 0 leftmargin=1 0 onload="window. focus" form name="formupload"...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2012/04/09 12:00 a.m.666 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

7.5CVSS1.6AI score0.07669EPSS
SaveExploits60References34Affected Software25
securityvulns
securityvulns
added 2012/03/19 12:00 a.m.143 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

6.8CVSS1.6AI score0.04852EPSS
SaveExploits11References36Affected Software30
securityvulns
securityvulns
added 2012/02/22 12:00 a.m.145 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

7.5CVSS1.6AI score0.09794EPSS
SaveExploits21References11Affected Software9
securityvulns
securityvulns
added 2012/02/15 12:00 a.m.28 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.6AI score
SaveExploits0References4Affected Software3
myhack58
myhack58
added 2012/02/14 12:00 a.m.29 views

Cyberoam Central Console v2. 0 0. 2 file contains and fixes-vulnerability warning-the black bar safety net

Title:Cyberoam Central Console v2. 0 0. 2 - File Include Vulnerability Overview: Cyberoam Central Console CCC appliances offer the flexibility of hardware CCC appliances and virtual CCC appliances to provide centralized security management across distributed Cyberoam UTM appliances, enabling high...

0.5AI score
SaveExploits0
securityvulns
securityvulns
added 2012/02/13 12:00 a.m.74 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

7.5CVSS1.6AI score0.0354EPSS
SaveExploits6References20Affected Software16
securityvulns
securityvulns
added 2012/02/12 12:00 a.m.45 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

6.5CVSS1.6AI score0.33471EPSS
SaveExploits4References9Affected Software6
securityvulns
securityvulns
added 2012/01/21 12:00 a.m.49 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

7.5CVSS1.6AI score0.05007EPSS
SaveExploits0References15Affected Software12
myhack58
myhack58
added 2012/01/18 12:00 a.m.75 views

Kingdee Apusic Web framework for the backend to get the site webshell and repair-vulnerability warning-the black bar safety net

Apusic Web Management Console Default background address: admin/login. jsp The default management account password: admin admin Use method: the background has to execute SQL statements, also have to load anything. Specific words have forgotten Find Upload, a loaded God horse, just look to...

0.5AI score
SaveExploits0
Rows per page
Query Builder