CVE-2019-16659

TuziCMS 2.0.6 has index.php/manage/link/doadd CSRF...

CVE-2020-16659

...

CVE-2020-16659

CVE-2020-16659 entry is rejected and not used.

CVE-2019-16659

TuziCMS 2.0.6 has index.php/manage/link/doadd CSRF...

CVE-2019-16659

The connected sources confirm CVE-2019-16659 affects TuziCMS 2.0.6, describing a CSRF issue in index.php/manage/link/do_add. The root cause is a Cross-Site Request Forgery vulnerability in that endpoint, enabling unauthorized state-changing requests from a logged-in user. Exploit details, affecte...

CVE-2018-16659

CVE-2018-16659 affects Rausoft ID.prove 2.95. The login page is vulnerable to SQL injection in the Username POST parameter through stacked Microsoft SQL Server queries. Root cause: improper handling allowing stacked queries that can lead to command execution via master..xp_cmdshell. Documented im...

CVE-2017-16659

CVE-2017-16659 involves the Gentoo mail-filter/assp package (versions ≤ 1.9.8.13030). A local attacker who can access the assp user account can escalate privileges by installing a Trojan horse at /usr/share/assp/assp.pl, under the assp context. Connected documents also confirm this as a local-pri...