Cerberus FTP Server web interface cross-site request forgery vulnerability

Overview The Cerberus FTP Server web interface contains a cross-site request forgery vulnerability Description CWE-352: Cross-Site Request Forgery CSRF: The Cerberus FTP Server web interface is vulnerable to CSRF using the HTTP POST method in the :10000/usermanager/users/modify. The application h...

Weibo.com Cross Site Scripting

Information --------------------------------- Name : XSS Vulnerability in WEIBO.COM Vendor Homepage : http://corp.sina.com.cn/eng/sinaindexeng.htm Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Yuping Li at ADLab of Beijing Leadsec Technology Co., Ltd Description...