53 matches found
CVE-2020-24982
CVE-2020-24982 concerns Quadbase ExpressDashboard (EDAB) 7 Update 9 and is described by Red Hat and other sources as a CSRF vulnerability. The issue enables an attacker to trick an authenticated user into changing the user’s email address, implying an authenticated session and user interaction re...
CVE-2020-24982
An issue was discovered in Quadbase ExpressDashboard EDAB 7 Update 9. It allows CSRF. An attacker may be able to trick an authenticated user into changing the email address associated with their account...
CVE-2020-24982: Cross-Site Request Forgery (CSRF)
An issue was discovered in Quadbase ExpressDashboard EDAB 7 Update 9. It allows CSRF. An attacker may be able to trick an authenticated user into changing the email address associated with their account...
CVE-2020-24985: Inclusion of Functionality from Untrusted Control Sphere
An issue was discovered in Quadbase EspressReports ES 7 Update 9. An authenticated user is able to navigate to the MenuPage section of the application, and change the frmsrc parameter value to retrieve and execute external files or payloads...
Quadbase ExpressDashboard 跨站请求伪造漏洞
Quadbase ExpressDashboard is a software application from Quadbase Inc. It provides the ability to build highly actionable, self-service KPI dashboards. A security vulnerability exists in Quadbase ExpressDashboard EDAB 7 Update 9, which can be exploited by an attacker to trick authenticated users...
Quadbase EspressReports ES 输入验证错误漏洞
Quadbase EspressReports ES is a software application from Quadbase, Inc. It provides special reporting and querying capabilities that allow users to create various queries and reports through a zero-client browser interface. A security vulnerability exists in Quadbase EspressReports ES 7 Update 9...
CVE-2020-24983
An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the target web application. This request will utilise the target admin session and perform the authenticate...
CVE-2020-24983
An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the target web application. This request will utilise the target admin session and perform the authenticate...
CVE-2020-24984
An issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an attacker may be able to trick an authenticated admin level user into uploading malicious files to the web server...
CVE-2020-24984
An issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an attacker may be able to trick an authenticated admin level user into uploading malicious files to the web server...
Cross site request forgery (csrf)
An issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an attacker may be able to trick an authenticated admin level user into uploading malicious files to the web server...
Cross site request forgery (csrf)
An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the target web application. This request will utilise the target admin session and perform the authenticate...
CVE-2020-24983
CVE-2020-24983 affects Quadbase EspressReports ES 7 Update 9. A CSRF flaw allows an unauthenticated attacker to craft a malicious HTML file containing a POST to the DashboardBuilder that uses the victim’s admin session to rename a Dashboard, i.e., the attacker can trigger authenticated changes vi...
CVE-2020-24983
An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the target web application. This request will utilise the target admin session and perform the authenticate...
CVE-2020-24984
CVE-2020-24984 affects Quadbase EspressReports ES 7 Update 9. A CSRF flaw could allow an attacker to trick an authenticated admin-level user into uploading malicious files to the web server. The connected documents confirm the vulnerability description across vendors (Red Hat, NVD, CVE list, PRIO...
CVE-2020-24984
An issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an attacker may be able to trick an authenticated admin level user into uploading malicious files to the web server...
Quadbase EspressReports ES 跨站请求伪造漏洞
Quadbase EspressReports ES is a software application from Quadbase, Inc. It provides special reporting and querying capabilities that allow users to create various queries and reports through a zero-client browser interface. A cross-site request forgery vulnerability exists in Quadbase...
CVE-2020-24983: Cross-Site Request Forgery (CSRF)
An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the target web application. This request will utilise the target admin session and perform the authenticate...
Quadbase EspressReports ES 跨站请求伪造漏洞
Quadbase EspressReports ES is a software application from Quadbase, Inc. It provides special reporting and querying capabilities that allow users to create various queries and reports through a zero-client browser interface. A cross-site request forgery vulnerability exists in Quadbase...
CVE-2020-24984: Cross-Site Request Forgery (CSRF)
An issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an attacker may be able to trick an authenticated admin level user into uploading malicious files to the web server...