15 matches found
CVE-2021-27700
SOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions. Any authorized customer with partner mode can switch to another customer dashboard and perform actions like modify user, delete user, etc...
CVE-2021-27701
SOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery CSRF via the Socifi wifi portal. The application does not contain a CSRF token and request validation. An attacker can Add/Modify any random user data by sending a crafted CSRF request...
CVE-2021-27701
SOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery CSRF via the Socifi wifi portal. The application does not contain a CSRF token and request validation. An attacker can Add/Modify any random user data by sending a crafted CSRF request...
CVE-2021-27700
SOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions. Any authorized customer with partner mode can switch to another customer dashboard and perform actions like modify user, delete user, etc...
SOCIFI Guest wifi 安全漏洞
SOCIFI Guest wifi is a web portal of SOCIFI UK. A security vulnerability exists in SOCIFI Guest wifi. An attacker exploiting this vulnerability could switch to another guest dashboard and perform actions such as modifying users, deleting users, etc...
CVE-2021-27701
SOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery CSRF via the Socifi wifi portal. The application does not contain a CSRF token and request validation. An attacker can Add/Modify any random user data by sending a crafted CSRF request...
CVE-2021-27701
SOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery CSRF via the Socifi wifi portal. The application does not contain a CSRF token and request validation. An attacker can Add/Modify any random user data by sending a crafted CSRF request...
CVE-2021-27700
SOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions. Any authorized customer with partner mode can switch to another customer dashboard and perform actions like modify user, delete user, etc...
PT-2024-10907 · Unknown · Socifi Guest Wifi
Name of the Vulnerable Software and Affected Versions: Socifi Guest wifi as SAAS affected versions not specified Description: The issue concerns a Cross Site Request Forgery CSRF vulnerability via the Socifi wifi portal. The application lacks a CSRF token and request validation, allowing an...
CVE-2021-27700
The SOCIFI Socifi Guest wifi SAAS wifi portal is impacted by an Insecure Permissions vulnerability. An authorized customer with partner mode enabled can exploit this flaw to switch to a different customer's dashboard. Once access is gained, the attacker can perform unauthorized actions, such as m...
CVE-2021-27700
SOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions. Any authorized customer with partner mode can switch to another customer dashboard and perform actions like modify user, delete user, etc...
CVE-2021-27701: Cross-Site Request Forgery (CSRF)
SOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery CSRF via the Socifi wifi portal. The application does not contain a CSRF token and request validation. An attacker can Add/Modify any random user data by sending a crafted CSRF request...
CVE-2021-27700: Authorization Bypass Through User-Controlled Key
SOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions. Any authorized customer with partner mode can switch to another customer dashboard and perform actions like modify user, delete user, etc...
SOCIFI Guest wifi 安全漏洞
SOCIFI Guest wifi is a web portal of SOCIFI UK. A security vulnerability exists in SOCIFI Guest wifi. An attacker exploiting this vulnerability could add or modify any random user data by sending a specially crafted cross-site request forgery request...
CVE-2021-27701
The SOCIFI Socifi Guest wifi as SAAS platform is vulnerable to a Cross-Site Request Forgery (CSRF) attack via the Socifi wifi portal. The root cause is the lack of CSRF tokens and proper request validation within the application. An attacker can exploit this vulnerability by sending a crafted CSR...