9 matches found
CVE-2023-23464: Permissive Cross-domain Policy with Untrusted Domains
Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...
PT-2023-18973
Name of the Vulnerable Software and Affected Versions Media CP Media Control Panel latest version Description A Permissive Flash Cross-domain Policy in the Media CP Media Control Panel may allow information disclosure. Recommendations For the Media CP Media Control Panel latest version, consider...
PT-2023-18975
Name of the Vulnerable Software and Affected Versions Media CP Media Control Panel affected versions not specified Description The issue is related to insufficient protection of credential changes. Recommendations At the moment, there is no information about a newer version that contains a fix fo...
CVE-2023-23466: Insufficiently Protected Credentials
Media CP Media Control Panel latest version. Insufficiently protected credential change...
CVE-2023-23467
Media CP Media Control Panel shows a reflected XSS vulnerability via an unspecified endpoint. The Connected documents consistently describe reflected XSS without detailing affected versions, exploit specifics, or a fix. No remediation information is provided in the supplied sources; monitor for u...
CVE-2023-23467: Improper Neutralization of Input During Web Page Generation
Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...
CVE-2023-23465: Cross-Site Request Forgery (CSRF)
Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint...
CVE-2023-23465
The CVE-2023-23465 entry concerns Media CP Media Control Panel with a CSRF vulnerability via an unspecified endpoint. Affected: Media CP Media Control Panel (no product/version details provided in the documents). Root cause: CSRF without details on the vulnerable endpoint or parameters. Impact: h...