315 matches found
Rumpus FTP Web File Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-04663)
Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the FTP Settings feature of Web File Manager in Rumpus FTP version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that a request is coming from a trusted...
CVE-2010-2247
makepasswd 1.10 default settings generate insecure passwords...
PHP Scripts Mall Entrepreneur B2B Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Entrepreneur B2B Script is a suite of B2B e-commerce platforms from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Entrepreneur B2B Script version 3.0.6, which can be exploited by a remote attacker to inject arbitrary web script or HTML vi...
CVE-2018-1000507
WP User Groups version 2.0.0 contains a Cross ite Request Forgery CSRF vulnerability in Settings page that can result in allows anybody to modify user groups and types. This attack appear to be exploitable via Admin must click on link. This vulnerability appears to have been fixed in 2.1.1...
Unspecified Vulnerability in IBM Rational Collaborative Lifecycle Management RSA DM
IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines three products, RTC, RQM, and RRC, in an IBM SmartCloud Enterprise cloud environment image to provide requirements management, change...
CVE-2017-10002
Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications subcomponent: Settings and Config. Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery
Digisol Router CSRF Exploit - Indrajith A.N history.pushState'', '', '/' input type="hidden" name="operrates" value="409...
Android elevation of privilege vulnerability (CNVD-2016-07422)
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. Android Settings has a security vulnerability that allows a local attacker to exploit the vulnerability to elevate privileges...
CVE-2016-4319: /auditing/settings was vulnerable to CSRF
panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-61803. panel The /auditing/settings resource was vulnerable to CSRF|https://en.wikipedia.org/wiki/Cross-siterequestforgery attacks...
CVE-2016-4319: /auditing/settings was vulnerable to CSRF
panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report|http://jira.atlassian.com/browse/JRASERVER-61803. panel The /auditing/settings resource was vulnerable to CSRF|https://en.wikipedia.org/wiki/Cross-siterequestforgery attacks...
PayPal Inc BB #98 MOS - Persistent Settings Vulnerability
Document Title: =============== PayPal Inc BB 98 MOS - Persistent Settings Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=983 Release Date: ============= 2014-10-13 Vulnerability Laboratory ID VL-ID: ==================================== 98...
WordPress Basic Google Maps Placemarks Plugin <= 1.10.2 - XSS
This plugin is prone to a settings.php multiple fields stored XSS weakness. Solution Upgrade this plugin...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the adminid, newpass1, and newpass2 parameters...
eXeem 0.21 - Local Password Disclosure
/ eXeem v0.21 Local Exploit by Kozan Application: eXeem v0.21 Vendor: www.exeem.com Vulnerable Description: eXeem v0.21 discloses passwords for proxy settings to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web : www.netmagister.com Web2: www.spyinstructors.com Mail:...
