CVE-2014-9101

Multiple cross-site request forgery CSRF vulnerabilities in Oxwall 1.7.0 build 7907 and 7906 and SkaDate Lite 2.0 build 7651 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks or possibly have other unspecified impact v...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Oxwall 1.7.0 build 7907 and 7906 and SkaDate Lite 2.0 build 7651 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks or possibly have other unspecified impact v...

CVE-2014-9101

CVE-2014-9101 affects Oxwall 1.7.0 (build 7907/7906) and SkaDate Lite 2.0 (build 7651) with multiple CSRF vulnerabilities enabling possible admin session hijack and related XSS via POST parameters (e.g., label in admin/users/roles/, lang[...] in AddAccountType, qst_name in addQuestion, form_name ...

PT-2014-8828

Name of the Vulnerable Software and Affected Versions Oxwall versions 1.7.0 build 7907 and 7906 SkaDate Lite version 2.0 build 7651 Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks or possibly...

CVE-2014-9101: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Oxwall 1.7.0 build 7907 and 7906 and SkaDate Lite 2.0 build 7651 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks or possibly have other unspecified impact v...

Visitors Google Map Lite module mod_visitorsgooglemap SQL Injection

An SQL injection vulnerability has been reported in Visitors Google Map Lite module Mod Visitorsgooglemap. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-7646

The EMT-Paramedic Lite aka com.wEMTparamedicLite application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Marijuana Handbook Lite - Weed aka com.fallacystudios.marijuanahandbooklite application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The EMT-Paramedic Lite aka com.wEMTparamedicLite application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7781

The Marijuana Handbook Lite - Weed aka com.fallacystudios.marijuanahandbooklite application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7646

CVE-2014-7646 concerns the Android app EMT-Paramedic Lite (com.wEMTparamedicLite) version 0.1, where the SSL implementation fails to verify X.509 certificates. This allows man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. Connected records (N...

CVE-2014-7781

CVE-2014-7781 affects the Android app The Marijuana Handbook Lite - Weed (com.fallacystudios.marijuanahandbooklite), version 3.2. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling potential man-in-the-middle attackers to spoof servers and acces...

PT-2014-8158

Name of the Vulnerable Software and Affected Versions EMT-Paramedic Lite version 0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL servers...

PT-2014-8266

Name of the Vulnerable Software and Affected Versions The Marijuana Handbook Lite - Weed aka com.fallacystudios.marijuanahandbooklite version 3.2 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain...

CVE-2014-7781: Undefined Security Weakness

The Marijuana Handbook Lite - Weed aka com.fallacystudios.marijuanahandbooklite application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7646: Undefined Security Weakness

The EMT-Paramedic Lite aka com.wEMTparamedicLite application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7419

The PokeCreator Lite aka com.pokecreator.builderlite application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PokeCreator Lite aka com.pokecreator.builderlite application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7419

The PokeCreator Lite aka com.pokecreator.builderlite application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7419

The CVE-2014-7419 entry affects the Android app PokeCreator Lite (package name com.pokecreator.builderlite ) at version 1.1 . The root cause is that the application does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensiti...