7 matches found
EUVD-2017-17790
Malware in sbrugna...
CVE-2017-8848
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...
CVE-2017-8848
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...
Design/Logic Flaw
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...
CVE-2017-8848
Summary (CVE-2017-8848): Allen Disk 1.6 contains a cross-site request forgery (CSRF) in setpass.php that can change a password. Multiple sources (CNVD-2017-07083, NVD entry, Red Hat listing) confirm the vulnerability in Allen Disk 1.6 and its CSRF nature, but the connected documents do not provid...
PT-2017-18578
Name of the Vulnerable Software and Affected Versions Allen Disk version 1.6 Description The issue allows for changing a password due to a CSRF vulnerability in the setpass.php file. Recommendations For Allen Disk version 1.6, consider restricting access to the setpass.php file until a patch is...
