Hack Forums
[2/5] SysAid Cross-Site Request Forgery Vulnerability - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [2/5] SysAid Cross-Site Request Forgery Vulnerability (/showthread.php?tid=2179)



[2/5] SysAid Cross-Site Request Forgery Vulnerability - Omniscient - Oct 1, 2007

nights shadow has discovered a vulnerability in SysAid, which can be exploited by malicious people to conduct cross-site request forgery attacks.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
Detects insecure versions of applications installed
Verifies that all Microsoft patches are applied
Assists you in updating your system and applications
Runs through your browser. No installation or download is required.

Posted at http://secunia.com/advisories/27026/