CVE-2012-1237

Cross-site request forgery CSRF vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users...

Session fixation

Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2012-1237

SENCHA SNS

CVE-2012-1237

Cross-site request forgery CSRF vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-1238

Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2012-1238

CVE-2012-1238 affects SENCHA SNS prior to 1.0.2. The vulnerability is a session-fixation issue that may allow a remote, unauthenticated attacker to impersonate an honest user and access or alter information. Public sources (JVN/JVNDB/NVD) confirm the impact and publicly advise updating to the lat...

SENCHA SNS vulnerable to session fixation

Overview SENCHA SNS contains a session fixation vulnerability. SENCHA SNS is an open source SNS software. SENCHA SNS contains a session fixation vulnerability. Hiroshi Tokumaru of HASH Consulting Corp. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

SENCHA SNS vulnerable to cross-site request forgery

Overview SENCHA SNS contains a cross-site request forgery vulnerability. SENCHA SNS is an open source SNS software. SENCHA SNS contains a cross-site request forgery vulnerability. Hiroshi Tokumaru of HASH Consulting Corp. reported this vulnerability to IPA. JPCERT/CC coordinated with the develope...

JVN#97200417: SENCHA SNS vulnerable to session fixation

SENCHA SNS is an open source SNS software. SENCHA SNS contains a session fixation vulnerability. Impact A remote, unauthenticated attacker may impersonate an honest user of the affected product. As a result, information may be altered or obtained. Solution Update the Software Update to the latest...

JVN#44913777: SENCHA SNS vulnerable to cross-site request forgery

SENCHA SNS is an open source SNS software. SENCHA SNS contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged in, arbitrary operations may be conducted on the vulnerable system. Solution Update the Software Update to the latest version provided by...

JVN#03114223 SQL injection vulnerability in SKIP from SKIP User Group

SKIP from SKIP User Group is an open source SNS Social Networking Service software. SKIP contains a SQL injection vulnerability. Impact Contents created by SKIP can be altered or information saved by SKIP can be obtained by a user that can login to SKIP. Solution Update the software Update to the...

JVN#43233160 Cross-site scripting vulnerability in SKIP from SKIP User Group

SKIP from SKIP User Group is an open source SNS Social Networking Service software. SKIP contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on certain web browsers. Solution Update the software Update to the latest version according to the information provid...

JVN#36802959 MyNETS cross-site scripting vulnerability

MyNETS from Usagi Project is an open source SNS Social Networking Service software. MyNETS contains a cross-site scripting vulnerability. Impact If a user views a specially crafted web page, an arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the...

JVN#53267766 MyNETS cross-site scripting vulnerability

MyNETS from Usagi Project is an open source SNS Social Networking Service software. MyNETS contains a cross-site scripting vulnerability. Impact If a user views a specially crafted web page, an arbitrary script may be executed on the user's web browser. As a result, user information may be...

Unfixed XSS vulnerability at www.allmovie.com

Security researcher SnS, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.allmovie.com, which at the time of submission ranked 15788 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently...

Unfixed XSS vulnerability at www.browning.com

Security researcher SnS, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.browning.com, which at the time of submission ranked 120621 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is currently...

Unfixed XSS vulnerability at www.icrimewatch.net

Security researcher SnS, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.icrimewatch.net, which at the time of submission ranked 260822 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is current...

Unfixed XSS vulnerability at thinkfinity.org

Security researcher SnS, has submitted on 05/04/2008 a cross-site-scripting XSS vulnerability affecting thinkfinity.org, which at the time of submission ranked 1268435 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is currently...

Unfixed XSS vulnerability at www.lookup.nl

Security researcher SnS, has submitted on 02/04/2008 a cross-site-scripting XSS vulnerability affecting www.lookup.nl, which at the time of submission ranked 292015 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/04/2008. It is currently...