11 matches found
CVE-2016-5817
SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2016-5817: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2016-6695
Name of the Vulnerable Software and Affected Versions Cargotec Navis WebAccess versions prior to 2016-08-10 Description A SQL injection issue exists in the news pages of the software, allowing remote attackers to execute arbitrary SQL commands. The exact vectors used for the attack are not...
CVE-2012-1414
Cross-site request forgery CSRF vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action...
CVE-2012-1414
Cross-site request forgery CSRF vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action...
CVE-2012-1414
Cross-site request forgery CSRF vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action...
CVE-2012-1414
The CVE-2012-1414 entry relates to a Cross-site request forgery (CSRF) vulnerability in Plume CMS, specifically in the file manager/news.php for version 1.2.4 and earlier. The issue allows remote attackers to hijack the authentication of administrators when performing publish actions that create ...
PT-2012-3241
Name of the Vulnerable Software and Affected Versions Plume CMS versions 1.2.4 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action. Recommendations For Plume...
CVE-2012-1414: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action...
Anthem Design SQL Injection
+------------------------------------------------------------------------------------------+ |-------------------- Anthem Design Multiple SQL Injection Vulnerability -------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...