Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/27 12:00 a.m.•7 views

CVE-2020-18418: Cross-Site Request Forgery (CSRF)

A Cross site request forgery CSRF vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert...

8.8CVSS7.7AI score0.00384EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/08/08 12:00 a.m.•4 views

PT-2018-12925

Name of the Vulnerable Software and Affected Versions Gxlcms version 2.0 Description The issue allows for a CSRF attack, which can be used to add an administrator account through the news/index.php?s=Admin-Admin-Insert endpoint. Recommendations For Gxlcms version 2.0, consider implementing CSRF...

8.8CVSS0.00579EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/08 12:00 a.m.•7 views

CVE-2018-15177: Cross-Site Request Forgery (CSRF)

In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account...

8.8CVSS7.8AI score0.00579EPSS
SaveExploits0References2
Rows per page
Query Builder