2969 matches found
CVE-2014-8567
The modauthmellon module before 0.8.1 allows remote attackers to cause a denial of service Apache HTTP server crash via a crafted logout request that triggers a read of uninitialized data...
CVE-2014-8567: Undefined Security Weakness
The modauthmellon module before 0.8.1 allows remote attackers to cause a denial of service Apache HTTP server crash via a crafted logout request that triggers a read of uninitialized data...
RHEL 6 : mod_auth_mellon (RHSA-2014:1803)
An updated modauthmellon package that fixes two security issues is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
mod_auth_mellon security update
CentOS Errata and Security Advisory CESA-2014:1803 An updated modauthmellon package that fixes two security issues is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...
mod_auth_mellon: logout processing leads to denial of service
It was found that uninitialized data could be accessed when processing a user's logout request. By attempting to log out, a user could possibly cause the Apache HTTP Server to crash...
Important: Red Hat Security Advisory: mod_auth_mellon security update
An updated modauthmellon package that fixes two security issues is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
PT-2014-8623
Name of the Vulnerable Software and Affected Versions mod auth mellon versions prior to 0.8.1 Description The issue allows remote attackers to cause a denial of service, resulting in an Apache HTTP server crash. This is achieved through a crafted logout request that triggers a read of uninitializ...
Open redirect
Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...
CVE-2014-8070
Pagekit CMS 0.8.7 is affected by CVE-2014-8070, an open redirect vulnerability. A crafted value in the redirect parameter to index.php/user/logout can redirect users to arbitrary sites, enabling phishing via trust manipulation. The OpenVAS/NVD entries corroborate a cross-site redirect risk and th...
CVE-2014-8070: Undefined Security Weakness
Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...
WordPress 3.4.2 - 3.9.2 Does Not Invalidate Sessions Upon Logout
...
Mavenlink: Cookies are not cleared from Server side on Logout
i logged out from my account after using it and then clicked on back i found my account logged in.Cookies are not handled well on logged out.I saw that cookie is not expired. If the hacker gets victim's cookie, the hacker can use it for a pretty good time period. Best Regardz RajaUzairAbdullah...
Envoy: Authentication Bypass
During the testing i found that able to access the account section of the page even after logout. Screenshot attached for your reference which shows that account section is accessible after logout. Screenshot attached for your reference. Please let me know if you need more information on this. Cu...
Orbis CMS 1.0.2 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: Orbis CMS 1.0.2 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Sun 11 Jul 2010 08:08:10 PM EEST Vendor: http://www.novo-ws.com/orbis-cms/ Download: http://www.ohloh.net/p/orbis-cms/download?filename=orbis-1.0.2.zip --- -= CSRF Po...
eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Thu 15 Jul 2010 12:08:07 PM EEST Vendor: http://www.xmbforum.com/ Download: http://www.xmbforum.com/download/XMB-1.9.11.09.zip --- -= CSRF PoC 1 - Change...
Grafik CMS 1.1.2 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: Grafik CMS 1.1.2 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Mon 12 Jul 2010 07:07:22 PM EEST Vendor: http://www.grafik-power.com/grafikcms/ Download: None --- -= CSRF PoC 1 - Change Admin Password =- html head titleGrafik CMS...
RemotelyAnywhere Default.HTML Logout Message Injection Weakness
No description provided by source. source: http://www.securityfocus.com/bid/9202/info RemotelyAnywhere has been reported prone to a logout message injection weakness. It has been reported that this issue presents itself due to a lack of sufficient restrictions performed by RemotelyAnywhere on use...
Diferior CMS 8.03 Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: Diferior CMS 8.03 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Tue 13 Jul 2010 11:50:32 AM EEST Vendor: http://diferior.com/ Download: http://diferior.com/postfiles/news/diferior-8-03-released/Diferiorv8.03.tar.gz --- -= CSRF P...
Wolfcms <= 0.75 Multiple Vulnerabilities (CSRF - XSS)
No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms = 0.75 Multiple Vulnerabilities CSRF - XSS Date : 22-03-2012 Author : Ivano Binetti...
GetSimple CMS 2.01 - Multiple Vulnerabilities (XSS/CSRF)
No description provided by source. !--- Title: GetSimple CMS 2.01 Multiple Vulnerabilities XSS/CSRF Author: 10n1z3d 10n1z3datwdotcn Date: Mon 12 Jul 2010 12:11:45 PM EEST Vendor: http://get-simple.info/ Download: http://www.box.net/get-simple --- -= CSRF PoC 1 - Change Admin Password =- html head...