The Easy Address Book WebServer 1.2 is vulnerable to CSRF attacks. An attacker can trick a user into visiting a malicious website that performs actions on the Easy Address Book WebServer on behalf of the user without their consent or knowledge.
ActiTime 2.0 MA is vulnerable to Cross Site Request Forgery (CSRF). The application does not verify the origin of the request when performing certain actions. This allows an attacker to perform certain actions on behalf of a logged in user, without the user's knowledge. The following actions are vulnerable: Create a new user, Delete a user, Change user password.
A Cross-Site Scripting (XSS) vulnerability exists in ORACLE Business Process Management (Process Administrator) version 5.7-6.0-10.3 +MP's. The vulnerability is due to insufficient sanitization of user-supplied input in the web-based user interface for managing the process execution environment, including process definitions, process instances, and process services. An attacker can exploit this vulnerability by sending a maliciously crafted request to the vulnerable application. Successful exploitation could result in the execution of arbitrary HTML and script code in the context of the affected application.
MemDb Multiple Remote Dos is a vulnerability that allows an attacker to cause a denial of service (DoS) condition on a vulnerable server by sending a specially crafted HTTP request with an overly long 'Host' header. This vulnerability affects MemCompany v1.0, Memdb Memory Database System v1.02, and Memdb Online Survey Sistem v2006.
Services By CQR