93 matches found
PT-2018-1788
Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 affected versions not specified Description The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to inject arbitrary code into a user-loaded web...
File Containment Vulnerability in Youkai 365 Business v1.5 System
Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. A file inclusion vulnerability exists in the UX365 Business v1.5 system, which is due...
Design/Logic Flaw
A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a page in the web interface of the affected application. The vulnerability is due to improper sanitization of parameter values by the affected application. An...
CVE-2016-3009
Cross-site request forgery CSRF vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the Connections generic page...
SOL14712 - The BIG-IP APM access policy logout page may be vulnerable to XSS cookie tampering
Recommended action To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. To mitigate this vulnerability, you can modify the logout web page to null the specific code identified at issue. To do so, perform the...
CVE-2012-1649: Undefined Security Weakness
Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors...
WebfolioCMS 1.1.4 - Cross-Site Request Forgery (Add AdminModify Pages)
WebfolioCMS 1.1.4 - Cross-Site Request Forgery Add AdminModify Pages +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : WebfolioCMS = 1.1.4 CSRF Add Admin/Modify Pages Date : 28-02-2012 Author : Ivano...
Design/Logic Flaw
admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the cid parameter...
CVE-2009-4876: Undefined Security Weakness
admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the cid parameter...
CVE-2009-1434
Cross-site request forgery CSRF vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a 1 save or 2 view script in the SRC attribut...
CVE-2009-1434
Foswiki CSRF (CVE-2009-1434): Affected: Foswiki 1.0.x prior to 1.0.5. Vulnerable vector involves CSRF via URLs in IMG SRC attributes that trigger save/view scripts, enabling an attacker to hijack user sessions to modify pages, change permissions, or alter group memberships. Root cause: insufficie...
Have to say by the campus network see Network Security status-vulnerability warning-the black bar safety net
Preface originally really do not want to write this article, but really can not let people endure. Did not expect the school campus network security situation is actually so bad, one of the most impressive Willy-nilly. Or administrator of quality and safety awareness. Status of the recall a year...