8 matches found
EUVD-2018-19433
Malware in sbrugna...
CVE-2018-7718
An issue was discovered in Telexy QPath 5.4.462. A low privileged authenticated user supplying a specially crafted serialized request to AdanitDataService.svc may modify user information, including but not limited to email address, username, and password, of other user accounts. The simplest atta...
CVE-2018-7718
An issue was discovered in Telexy QPath 5.4.462. A low privileged authenticated user supplying a specially crafted serialized request to AdanitDataService.svc may modify user information, including but not limited to email address, username, and password, of other user accounts. The simplest atta...
Design/Logic Flaw
An issue was discovered in Telexy QPath 5.4.462. A low privileged authenticated user supplying a specially crafted serialized request to AdanitDataService.svc may modify user information, including but not limited to email address, username, and password, of other user accounts. The simplest atta...
CVE-2018-7718
An issue was discovered in Telexy QPath 5.4.462. A low privileged authenticated user supplying a specially crafted serialized request to AdanitDataService.svc may modify user information, including but not limited to email address, username, and password, of other user accounts. The simplest atta...
CVE-2018-7718
CVE-2018-7718 affects Telexy QPath 5.4.462 where a low-privileged, authenticated user can craft a serialized request to AdanitDataService.svc to modify e.g. email, username, or password of other accounts. The documented attack path suggests intercepting a password-change request and altering the ...
PT-2018-18232
Name of the Vulnerable Software and Affected Versions: Telexy QPath version 5.4.462 Description: A low-privileged authenticated user can modify user information, including email address, username, and password, of other user accounts by supplying a specially crafted serialized request to...
CVE-2018-7718: Undefined Security Weakness
An issue was discovered in Telexy QPath 5.4.462. A low privileged authenticated user supplying a specially crafted serialized request to AdanitDataService.svc may modify user information, including but not limited to email address, username, and password, of other user accounts. The simplest atta...