homegate.ch XSS vulnerability

Vulnerable URL: http://www.homegate.ch/homegate-war/view/component/removals/pagepartner.seam?level1=removals&level2;=partner=hgf=default〈=fr=removalsPartnercampaign=hgfmedium=clsource=HPterm=um385 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability...

CVE-2014-10008: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authentication of administrators for requests that add 1 an administrator via a crafted request to the admin page, 2 an agent via a crafted request to the agent page, 3 a sub-agent via a...

PT-2015-3652

Name of the Vulnerable Software and Affected Versions Stark CRM version 1.0 Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This can be achieved through crafted requests to specific pages, including the admin page, agent page, sub...