7 matches found
PT-2019-11960
Name of the Vulnerable Software and Affected Versions HYBBS version 2.2 Description An issue was discovered that allows adding an administrator account due to a CSRF vulnerability in the "/?admin/user.html" API endpoint. Recommendations For HYBBS version 2.2, as a temporary workaround, consider...
CVE-2019-10644: Cross-Site Request Forgery (CSRF)
An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account...
Cross site request forgery (csrf)
In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account...
CVE-2018-18215
In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account...
CVE-2018-18215
In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account...
PT-2018-14373
Name of the Vulnerable Software and Affected Versions youke365 version 1.1.5 Description The issue concerns a CSRF vulnerability in the admin/user.html endpoint. This vulnerability can be exploited to add a user account. Recommendations For youke365 version 1.1.5, consider implementing proper CSR...