CVE-2018-18797

School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php...

CVE-2018-18382: Unrestricted Upload of File with Dangerous Type

Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile" "Change Picture" aka user/edit-profile action...

MicroPyramid Django-CRM Cross-Site Request Forgery Vulnerability

MicroPyramid Django-CRM is an open source customer relationship management system CRM based on the Django framework . A cross-site request forgery vulnerability exists in the /users/create/, /users//edit/, and /accounts//delete/ URIs in MicroPyramid Django-CRM version 0.2. A remote attacker can...

CVE-2018-16447

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...

CVE-2018-16447: Cross-Site Request Forgery (CSRF)

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...

Monstra-Dev 3.0.4 - Cross-Site Request Forgery (Account Hijacking)

Exploit Title: Monstra-Dev 3.0.4 - Cross-Site Request ForgeryAccount Hijacking Date: 2018-08-04 Exploit Author: Nainsi Gupta Vendor Homepage: http://monstra.org/ Product Name: Monstra-dev Version: 3.0.4 Tested on: Windows 10 Firefox/Chrome CVE : N/A 1. Description CSRF vulnerability in...

ekobroucek.cz Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-656150 Description| Value ---|--- Affected Website:| ekobroucek.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| CSRF Cross-Site Request Forgery / CWE-352 CVSSv3 Score:| 8.8...

rondony.cz Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-655177 Description| Value ---|--- Affected Website:| rondony.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| CSRF Cross-Site Request Forgery / CWE-352 CVSSv3 Score:| 8.8...

Cross site request forgery (csrf)

CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifying the account's email field...

CVE-2018-14029

CVE-2018-14029 : CSRF in the WityCMS 0.6.2 admin/user/edit flow allows an attacker to take over a user account by modifying user data (e.g., email, password). The vulnerability stems from cross-site request forgery in the admin interface, with CVSSv3 base score 8.8 (HIGH) and user interaction req...

CVE-2018-14029: Cross-Site Request Forgery (CSRF)

CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifying the account's email field...

PT-2018-4118 · Manageiq +1 · Manageiq +1

Name of the Vulnerable Software and Affected Versions: ManageIQ affected versions not specified Red Hat CloudForms Management Engine CFME affected versions not specified Description: The issue allows remote authenticated users to bypass authorization and gain privileges. This is due to improper...

CVE-2017-17904

FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the editprofilefirstname parameter to user/editprofile...

CVE-2017-17903

FS Lynda Clone has CSRF via user/editprofile, as demonstrated by adding content to the user panel...

FS Lynda Clone Cross-Site Request Forgery Vulnerability

FS Lynda Clone is a video tutorial software developed with jQuery, PHP and MySQL. FS Lynda Clone suffers from a cross-site request forgery vulnerability. An attacker can exploit this vulnerability to conduct cross-site request forgery attacks via user/editprofile...

Xavier PHP Management Panel SQL Injection Vulnerability

Xavier PHP Management Panel is a PHP-based web content protection script. A SQL injection vulnerability exists in Xavier PHP Management Panel version 2.4. A remote attacker can inject malicious SQL commands into the admin/adminuseredit.php file by sending the 'usertoedit' parameter or the...

CVE-2017-15949

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...

WordPress 2.9.2-4.8.1 - Open Redirect

Description An open redirect was discovered on the user and term edit screens. Reported by Yasin Soliman ysx...

DEBIAN-CVE-2017-14725

Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...

WordPress <=4.8.1 - Open redirect vulnerability (user and term edit screens)

Open redirect vulnerability found by Yasin Soliman ysx in WordPress user and term edit screens version 4.8.1 and earlier versions. Solution Update the WordPress to the latest available version at least 4.8.2...