«
Expand/Collapse
201 items tagged "csrf"
Related tags:
bugtraq [+],
vulnerabilities [+],
site [+],
day [+],
security [+],
debian [+],
vulnerability [+],
xss [+],
security vulnerabilities [+],
change [+],
admin [+],
works [+],
web [+],
tool [+],
server [+],
security advisory [+],
russ mcree [+],
request [+],
php [+],
password fields [+],
networking system [+],
mike bailey [+],
methodology [+],
malicious website [+],
mahara [+],
linux security [+],
license server [+],
license [+],
flatnux [+],
directory traversal [+],
directory [+],
denial of service [+],
debian linux [+],
cve [+],
csrfscanner [+],
cross site scripting [+],
cross [+],
citrix [+],
bugzilla [+],
advisory [+],
zomplog [+],
whcms [+],
web application [+],
username [+],
socialcms [+],
revou [+],
pixelpost [+],
password [+],
outlook web access [+],
outlook [+],
ossim [+],
open [+],
kubelance [+],
knowledge base [+],
javascript [+],
inverseflow [+],
gazelle [+],
e mail address [+],
diamondlist [+],
cyclecms [+],
couchdb [+],
cmscout [+],
cisco wag [+],
cisco [+],
change administrator password [+],
campsite [+],
cambio [+],
bxr [+],
blog [+],
ariadne [+],
ane [+],
administrator password [+],
admin interface [+],
access [+],
xsrf [+],
webapps [+],
cms [+],
zimplit [+],
yourtube [+],
xampp [+],
wolf [+],
wlm [+],
wizmall [+],
wireless cable modem [+],
wiki [+],
whitepaper [+],
webui [+],
websitebaker [+],
webmatic [+],
webid [+],
webcalendar [+],
vwd cms [+],
vwd [+],
video [+],
vam [+],
valente online [+],
valente [+],
user [+],
usebb [+],
upload [+],
twitter [+],
traidnt [+],
tr forum [+],
tomatocms [+],
tomatocart [+],
token [+],
tinypug [+],
timeclock [+],
tiger [+],
thehostingtool [+],
sudbox [+],
softbiz [+],
skybluecanvas [+],
sitecom [+],
simple 1 [+],
simple [+],
session fixation [+],
seopanel [+],
sdrf [+],
saurus cms [+],
safer use [+],
report [+],
remote [+],
rapidwarex [+],
pspopper [+],
preference settings [+],
power [+],
pluck [+],
phpautovideo [+],
php lance [+],
panel [+],
oscommerce [+],
orbis [+],
openfire [+],
opencart [+],
ocportal [+],
nucleuscms [+],
news 4 [+],
news [+],
netgear wireless cable modem gateway [+],
netgear wireless cable modem [+],
nagios [+],
mystic [+],
myclientbase [+],
multi [+],
mot [+],
moinmoin [+],
message board [+],
message [+],
meastro [+],
manager [+],
malicious code [+],
made [+],
lovecms [+],
lms [+],
linksys [+],
lara [+],
knowledge [+],
kleeja [+],
jobs [+],
jamb [+],
insight [+],
index [+],
idevcart [+],
idev [+],
iclowbidauction [+],
hyip [+],
hloun [+],
grafik [+],
gpub [+],
getsimple [+],
gallery [+],
frog [+],
forum [+],
flyspray [+],
fcms [+],
extreme [+],
exploit [+],
ensino [+],
elitecms [+],
edimax [+],
e store [+],
dotproject [+],
dolphin [+],
docuwiki [+],
django [+],
disclosure [+],
diferior [+],
dca [+],
dating [+],
dalbum [+],
d link [+],
csice [+],
croogo [+],
control [+],
collabtive [+],
cmysqlite [+],
cmsqlite [+],
cmspro [+],
cmsimple [+],
clantiger [+],
clain [+],
chilly [+],
changer [+],
bypass [+],
bpswoopo [+],
bppennyautobid [+],
bpoweritaliano [+],
board [+],
bloofoxcms [+],
base [+],
banner exchange [+],
banner [+],
b multiple [+],
authors [+],
authentication [+],
audio [+],
auctions [+],
auction [+],
archiva [+],
apache [+],
allomani [+],
aiocp [+],
affiliate [+],
administrative section [+],
admin panel [+],
admin account [+],
actitime [+],
abalonesoft [+],
multiple [+],
htb [+],
forgery [+]
-
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - phpmoneybooks CSRF Vulnerability (Add Admin)
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - MyClientBase CSRF Vulnerability (Add Admin)
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - PHP auctions CSRF Vulnerability (Add Admin)
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - Auction XL CSRF Vulnerability (Add Admin)
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - bloofoxCMS 0.4.0 CSRF Vulnerability (Add Admin)
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - i-Gallery CSRF Vulnerability (Add Admin)
-
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - Wordpress 3.3.1 Multiple CSRF Vulnerabilities
-
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - DocuWiki 2012/01/25 CSRF / XSS
-
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - oscommerce-2.3.1 CSRF Change admin and Password
-
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - idev-Payments 1.0 CSRF Vulnerability
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - SmartJobBoard 3.4 b5140 XSS / CSRF
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - pluck 4.7 CSRF edit index Vulnerability
-
-
5:12
»
Packet Storm Security Exploits
Flatnux CMS 2011 version 08.09.2 suffers from cross site request forgery, cross site scripting, and directory traversal vulnerabilities.
-
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - iDevCart 1.0 CSRF Vulnerability
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - BPSwoopo CSRF Vulnerability
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - BPPennyAutoBid CSRF Vulnerability
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - ICLowBidAuction CSRF Vulnerability
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - ReVou Micro Blogging (Twitter clone) CSRF
-
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - Dating Pro CSRF (change e-mail address)
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - Php-lance CSRF (add admin) Vulnerability
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - BPowerItaliano CSRF Vulnerability
-
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - Affiliate Pro CSRF (change e-mail address)
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - Kubelance CSRF (add new admin)
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - psPopper 3.0 CSRF (change password)
-
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - Ad Manager Pro CSRF Vuln (add admin)
-
15:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - A.M.Y CSRF (change admin password)
-
-
14:00
»
1337day (was: Inj3ct0r, 1337db)
[webapps / 0day] - Hloun v1.0.x => xss csrf to inject php code
-
-
15:38
»
Packet Storm Security Advisories
Bugzilla Security Advisory - Due to a lack of validation of the enctype form attribute when making POST requests to xmlrpc.cgi, a possible CSRF vulnerability was discovered in Bugzilla versions 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2.
-
15:38
»
Packet Storm Security Recent Files
Bugzilla Security Advisory - Due to a lack of validation of the enctype form attribute when making POST requests to xmlrpc.cgi, a possible CSRF vulnerability was discovered in Bugzilla versions 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2.
-
15:38
»
Packet Storm Security Misc. Files
Bugzilla Security Advisory - Due to a lack of validation of the enctype form attribute when making POST requests to xmlrpc.cgi, a possible CSRF vulnerability was discovered in Bugzilla versions 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2.
-
-
7:37
»
Packet Storm Security Recent Files
CSRFSCanner is a tool designed to identify the forms potentially vulnerable to CSRF/XSRF on a website. This detection is made on forms that are only accessible by logged-in users (cookies are needed to find these forms). The methodology used to identify these forms is the 4-pass reverse diff analysis. Then, in order to determine if a form may be vulnerable, the tool analyzes hidden and password fields to find an anti-CSRF token.
-
7:37
»
Packet Storm Security Tools
CSRFSCanner is a tool designed to identify the forms potentially vulnerable to CSRF/XSRF on a website. This detection is made on forms that are only accessible by logged-in users (cookies are needed to find these forms). The methodology used to identify these forms is the 4-pass reverse diff analysis. Then, in order to determine if a form may be vulnerable, the tool analyzes hidden and password fields to find an anti-CSRF token.
-
7:37
»
Packet Storm Security Misc. Files
CSRFSCanner is a tool designed to identify the forms potentially vulnerable to CSRF/XSRF on a website. This detection is made on forms that are only accessible by logged-in users (cookies are needed to find these forms). The methodology used to identify these forms is the 4-pass reverse diff analysis. Then, in order to determine if a form may be vulnerable, the tool analyzes hidden and password fields to find an anti-CSRF token.
-
-
17:34
»
SecuriTeam
Basic authentication is used as the primary and only authentication mechanism for the administrator interface on the device. Additionally, due to the lack of CSRF protection in the web application, the bypass attack can be coupled with CSRF.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
17:17
»
Packet Storm Security Advisories
Debian Linux Security Advisory 2206-1 - Two security vulnerabilities have been discovered in Mahara, a fully featured electronic portfolio, weblog, resume builder and social networking system. A security review commissioned by a Mahara user discovered that Mahara processes unsanitized input which can lead to cross-site scripting (XSS). Mahara Developers discovered that Mahara doesn't check the session key under certain circumstances which can be exploited as cross-site request forgery (CSRF) and can lead to the deletion of blogs.
-
17:17
»
Packet Storm Security Recent Files
Debian Linux Security Advisory 2206-1 - Two security vulnerabilities have been discovered in Mahara, a fully featured electronic portfolio, weblog, resume builder and social networking system. A security review commissioned by a Mahara user discovered that Mahara processes unsanitized input which can lead to cross-site scripting (XSS). Mahara Developers discovered that Mahara doesn't check the session key under certain circumstances which can be exploited as cross-site request forgery (CSRF) and can lead to the deletion of blogs.
-
17:17
»
Packet Storm Security Misc. Files
Debian Linux Security Advisory 2206-1 - Two security vulnerabilities have been discovered in Mahara, a fully featured electronic portfolio, weblog, resume builder and social networking system. A security review commissioned by a Mahara user discovered that Mahara processes unsanitized input which can lead to cross-site scripting (XSS). Mahara Developers discovered that Mahara doesn't check the session key under certain circumstances which can be exploited as cross-site request forgery (CSRF) and can lead to the deletion of blogs.
-
-
13:32
»
Packet Storm Security Advisories
Debian Linux Security Advisory 2163-1 - Several vulnerabilities were discovered in the django web development framework. For several reasons the internal CSRF protection was not used to validate ajax requests in the past. However, it was discovered that this exception can be exploited with a combination of browser plugins and redirects and thus is not sufficient. It was discovered that the file upload form is prone to cross-site scripting attacks via the file name.
-
13:32
»
Packet Storm Security Recent Files
Debian Linux Security Advisory 2163-1 - Several vulnerabilities were discovered in the django web development framework. For several reasons the internal CSRF protection was not used to validate ajax requests in the past. However, it was discovered that this exception can be exploited with a combination of browser plugins and redirects and thus is not sufficient. It was discovered that the file upload form is prone to cross-site scripting attacks via the file name.
-
13:32
»
Packet Storm Security Misc. Files
Debian Linux Security Advisory 2163-1 - Several vulnerabilities were discovered in the django web development framework. For several reasons the internal CSRF protection was not used to validate ajax requests in the past. However, it was discovered that this exception can be exploited with a combination of browser plugins and redirects and thus is not sufficient. It was discovered that the file upload form is prone to cross-site scripting attacks via the file name.
-
-
11:44
»
SecuriTeam
Potential security vulnerabilities have been identified in HP Insight Control Power Management for Windows.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
18:47
»
Packet Storm Security Misc. Files
Whitepaper called SDRF Vulnerability in Web Applications and Browsers. Like the known CSRF (Cross-Site Request Forgery) vulnerability, SDRF falsifies HTTP requests of users, but in contrast to CSRF, it forges the requests, that are send by a user to the same domain, where the malicious code, that exploits the vulnerability, is located.
-
-
17:01
»
Packet Storm Security Recent Files
Apache CouchDB versions prior to version 0.11.1 are vulnerable to cross site request forgery (CSRF) attacks. A malicious website can POST arbitrary JavaScript code to well known CouchDB installation URLs (like http://localhost:5984/) and make the browser execute the injected JavaScript in the security context of CouchDB's admin interface Futon.
-
17:01
»
Packet Storm Security Advisories
Apache CouchDB versions prior to version 0.11.1 are vulnerable to cross site request forgery (CSRF) attacks. A malicious website can POST arbitrary JavaScript code to well known CouchDB installation URLs (like http://localhost:5984/) and make the browser execute the injected JavaScript in the security context of CouchDB's admin interface Futon.
-
3:56
»
1337day (was: Inj3ct0r, 1337db)
DiamondList v0.1.6 CSRF Vulnerability
-
3:56
»
1337day (was: Inj3ct0r, 1337db)
BXR v0.6.8 CSRF Vulnerability
-
3:56
»
1337day (was: Inj3ct0r, 1337db)
Open Blog v1.2.1 CSRF Vulnerability
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
Outlook Web Access 2003 CSRF Vulnerability
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
Outlook Web Access 2003 CSRF Vulnerability
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
ActiTime 2.0-MA CSRF Vulnerability
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
Diferior CMS 8.03 Multiple CSRF Vulnerabilities
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
TheHostingTool v1.2.2 Multiple CSRF Vulnerabilities
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
GetSimple CMS v2.01 (XSS/CSRF) Vulnerabilities
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
Grafik CMS 1.1.2 Multiple CSRF Vulnerabilities
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
ClanTiger Multiple CSRF Vulnerabilities
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
Orbis CMS v1.0.2 Multiple CSRF Vulnerabilities
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
TomatoCart 1.0.1 Multiple CSRF Vulnerabilities
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
Frog CMS 0.9.5 Multiple CSRF Vulnerabilities
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
bbPress 1.0.2 [CSRF ] change admin password
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
Xampp 1.7.3 CSRF and Password disclosure Vulnerability
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
Allomani - E-Store v1.0 - [CSRF] Add Admin Account
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
CMSQlite & CMySQLite CSRF Vulnerability
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
WebsiteBaker 2.8.1 CSRF Vulnerability
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
Planet 1.1 - [CSRF] Add Admin Account
-
-
1:00
»
1337day (was: Inj3ct0r, 1337db)
RapidWareX v2.0.1 (WebUI) CSRF Exploit
-
-
9:01
»
Packet Storm Security Advisories
Ubuntu Security Notice 911-1 - It was discovered that several wiki actions and preference settings in MoinMoin were not protected from cross-site request forgery (CSRF). If an authenticated user were tricked into visiting a malicious website while logged into MoinMoin, a remote attacker could change the user's configuration or wiki content. It was discovered that MoinMoin did not properly sanitize its input when processing user preferences. An attacker could enter malicious content which when viewed by a user, could render in unexpected ways.