CVE-2016-3833: Undefined Security Weakness

The Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not properly manage the MANAGEUSERS and CREATEUSERS permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka internal bug 29189712...

CVE-2009-0648

CVE-2009-0648 refers to multiple CSRF vulnerabilities in the manage_users handler of Falt4 CMS (aka Falt4 Extreme), located in admin/index.php. The underlying issue enables remote attackers to hijack administrator sessions for password-change requests via the edit and edit_now actions. Affected c...

CVE-2009-0648: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the manageusers handler in admin/index.php in Falt4 CMS aka Falt4 Extreme RC4 allow remote attackers to hijack the authentication of administrators for requests that change passwords via the 1 edit and 2 editnow actions...