64 matches found
Cisco SD-WAN vManage Software XSRF (cisco-sa-vman-csrf-76RDbLEh)
According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an...
Cisco Identity Services Engine XSRF (cisco-sa-ise-csrf-vgNtTpAs)
According to its self-reported version, Cisco Identity Services Engine is affected by a cross site request forgery XSRF vulnerability due to insufficient XSRF protection. An unauthenticated, remote attacker can exploit this, by persuading a user to click a malicious link, in order to perform...
Atlassian Jira < 8.13.18 / 8.14.x < 8.20.6 / 8.21.0 XSRF (JRASERVER-73138)
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is affected by a cross-site request forgery XSRF vulnerability. Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the default...
Security Bulletin: IBM Planning Analytics Local is affected by a security vulnerability
Summary The Planning Analytics Workspace component of IBM Planning Analytics is impacted by a Cross-Site Request Forgery XSRF vulnerability . This vulnerability has been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 48. Vulnerability Details CVEID:...
Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilties
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Cognos Analytics. These issues were disclosed as part of the IBM Java SDK updates in October 2017, January 2018, April 2018, July 2018, October 2018, January 2019 and April 2019. Cognos Analytics has...
Security Updates for Azure DevOps Server (June 2019)
The Azure DevOps Server is missing a security update. It is, therefore, affected by a cross-site request forgery XSRF vulnerability: - A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, resulting in a cross-site request forgery. A...
openSUSE Security Update : phpMyAdmin (openSUSE-2018-1547)
This update for phpMyAdmin fixes security issues and bugs. Security issues addressed in the 4.8.4 release bsc1119245 : - CVE-2018-19968: Local file inclusion through transformation feature - CVE-2018-19969: XSRF/CSRF vulnerability - CVE-2018-19970: XSS vulnerability in navigation tree This update...
XSRF/CSRF vulnerability in phpMyAdmin
PMASA-2018-7 Announcement-ID: PMASA-2018-7 Date: 2018-12-07 Summary XSRF/CSRF vulnerability in phpMyAdmin Description By deceiving a user to click on a crafted URL, it is possible to perform harmful SQL operations such as renaming databases, creating new tables/routines, deleting designer pages,...
Drupal 8.x < 8.2.7 Multiple Vulnerabilities
According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - A security bypass vulnerability exists in the editor module due to a failure to properly check access restrictions when adding private files with a configured text editor e.g...
Sharetronix CMS 3.6.2 - Cross-Site Request Forgery / Cross-Site Scripting
Exploit Title: Sharetronix CMS XSRF Vulnerability Version : 3.6.2 Exploit Author: Hesam Bazvand Software Link: http://sharetronix.ir/wp-content/uploads/2014/10/gold.zip Tested on: Windows 10 / Kali Linux Category: WebApps Dork : Use You Mind :D Email : [email protected] Video :...
MGASA-2017-0471 Updated phpmyadmin packages fix security vulnerability
Due to an XSRF/CSRF vulnerability in phpMyAdmin before 4.7.7, by deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc PMASA-2017-9. The phpmyadmin package has been updated to version 4.7.7 to fix...
ETchat 3.7 - Cross-Site Request Forgery Vulnerability
Exploit for php platform in category web applications Exploit Title: ETchatpersian version CMS Xsrf vulnerability Exploit Author: Hesam Bazvand Contact: https://www.facebook.com/hesam.king73 Software Link: http://dl.20script.ir/script/chat/et-chat-3.7-Persianwww.20script.ir.zip Tested on: Windows...
ETchat 3.7 Cross Site Request Forgery
Exploit Title: ETchatpersian version CMS Xsrf vulnerability Exploit Author: Hesam Bazvand Contact: https://www.facebook.com/hesam.king73 Software Link: http://dl.20script.ir/script/chat/et-chat-3.7-Persianwww.20script.ir.zip Tested on: Windows 7 / Kali Linux Category: WebApps Dork : User Your Min...
MGASA-2016-0051 Updated phpmyadmin/phpseclib packages fix security vulnerability
Password suggestion functionality uses Math.random which does not provide cryptographically secure random numbers CVE-2016-1927. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full pa...
Backup action is XSRF vulnerable
XSRF vulnerability was identified and fixed, so it was possible to trigger backup action taking application into maintenance mode. This could lead to overwriting an existing backup file...
Backup action is XSRF vulnerable
XSRF vulnerability was identified and fixed, so it was possible to trigger backup action taking application into maintenance mode. This could lead to overwriting an existing backup file...
Backup action is XSRF vulnerable
XSRF vulnerability was identified and fixed, so it was possible to trigger backup action taking application into maintenance mode. This could lead to overwriting an existing backup file...
Backup action is XSRF vulnerable
XSRF vulnerability was identified and fixed, so it was possible to trigger backup action taking application into maintenance mode. This could lead to overwriting an existing backup file...
Auto-Exchanger 5.1.0 - Cross-Site Request Forgery
Auto-Exchanger 5.1.0 - Cross-Site Request Forgery INPUT type='hidden' maxLength=60 size=30 name="mail" id="mail" va...
Autoexchanger 5.1.0 Cross Site Request Forgery
Exploit Title: Auto-exchanger version 5.1.0 Xsrf Date: 2015/06/05 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.auto-exchanger.com Version: Version 5.1.0 Demo : www.farhadexchange.com CVE : CVE-2015-6827...