Sitemax Maestro - SQL Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/55386/info Sitemax Maestro is prone to SQL-injection and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the application, access or modify data,...

CVE-2012-3799

Multiple cross-site request forgery CSRF vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 change workflows or 2 insert cross-site scripting XSS sequences...

CVE-2012-2723

Cross-site scripting XSS vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 change workflows or 2 insert cross-site scripting XSS sequences...

Cross site scripting

Cross-site scripting XSS vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3799

The CVE-2012-3799 entry concerns the Drupal Maestro module (7.x-1.x) prior to 7.x-1.2, where inadequate validation of user input in admin screens enabled CSRF and XSS, allowing an attacker to hijack administrator actions (including workflow changes) via authenticated sessions. The advisory confir...

CVE-2012-2723

CVE-2012-2723 affects the Drupal Maestro module (7.x-1.x) prior to 7.x-1.2. The root cause is insufficient filtering/validation of user-supplied data in the module’s admin screens, enabling XSS. The vulnerability requires a user with maestro admin permissions and allows remote authenticated users...

CVE-2012-2723

Cross-site scripting XSS vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3799

Multiple cross-site request forgery CSRF vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 change workflows or 2 insert cross-site scripting XSS sequences...

SA-CONTRIB-2012-094 - Maestro module - Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS)

The Maestro module is a workflow engine/solution that facilitates simple and complex business process automation. The module doesn't sufficiently filter user-supplied data in its admin screens leading to a Cross Site Scripting XSS vulnerability. A Cross Site Request Forgery vulnerability in the...

Valente Online CMS Meastro - CSRF Add Admin Account

Exploit for php platform in category web applications =================================================== Valente Online CMS Meastro - CSRF Add Admin Account =================================================== Exploit Title: Valente Online CMS Meastro - CSRF Add Admin Account Author: Mr.Hx &...