17 matches found
EUVD-2010-3461
Malware in sbrugna...
EUVD-2010-3462
Malware in sbrugna...
Santafox XSS and CSRF Vulnerabilities
Santafox is prone to cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2010-3464
Cross-site request forgery CSRF vulnerability in admin/managerusers.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests, as demonstrated by adding administrative users via the saveadmin action to admin/index.php...
CVE-2010-3463
Cross-site scripting XSS vulnerability in modules/search/search.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the search parameter to search.html...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in admin/managerusers.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests, as demonstrated by adding administrative users via the saveadmin action to admin/index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in modules/search/search.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the search parameter to search.html...
CVE-2010-3463
Cross-site scripting XSS vulnerability in modules/search/search.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the search parameter to search.html...
CVE-2010-3464
Cross-site request forgery CSRF vulnerability in admin/managerusers.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests, as demonstrated by adding administrative users via the saveadmin action to admin/index.php...
CVE-2010-3464
SantaFox CSRF in admin/manager_users.class.php (v2.02, possibly earlier) allows an attacker to hijack admin sessions by performing actions via admin/index.php, e.g., adding administrative users through the save_admin path. Connected OpenVAS entry also notes XSS/CSRF vectors for SantaFox. Impact i...
CVE-2010-3463
SantaFox 2.02 (and possibly earlier) is vulnerable to a Cross-site Scripting (XSS) flaw in modules/search/search.class.php, exploitable via the search parameter to search.html. The root cause is insufficient input sanitation in the search parameter, allowing remote attackers to inject arbitrary H...
XSRF (CSRF) in SantaFox
Vulnerability ID: HTB22594 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinsantafox.html Product: SantaFox Vendor: artprom http://www.santafox.ru/ Vulnerable Version: 2.02 and Probably Prior Versions Vendor Notification: 23 August 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...
XSS vulnerability in SantaFox search module
Vulnerability ID: HTB22593 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsantafoxsearchmodule.html Product: SantaFox Vendor: artprom http://www.santafox.ru/ Vulnerable Version: 2.02 and Probably Prior Versions Vendor Notification: 23 August 2010 Vulnerability Type: XSS Cross Site...
SantaFox 2.02 Cross Site Request Forgery / Cross Site Scripting
======================================= Vulnerability ID: HTB22593 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsantafoxsearchmodule.html Product: SantaFox Vendor: artprom http://www.santafox.ru/ Vulnerable Version: 2.02 and Probably Prior Versions Vendor Notification: 23 August...
Santafox 2.0.2 - search Cross-Site Scripting
Santafox 2.0.2 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/43237/info Santafox is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...
Santafox 2.0.2 - 'search' Cross-Site Scripting
source: https://www.securityfocus.com/bid/43237/info Santafox is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Multiple Vulnerabilities in SantaFox
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in SantaFox which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in SantaFox: CVE-2010-3463 The vulnerability exists due to input...