CVE-2019-16678

admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route...

CVE-2020-16678

CVE-2020-16678 entry is rejected/not used; not an active vulnerability entry.

CVE-2020-16678

...

CVE-2019-16678

CVE-2019-16678 affects YzmCMS 5.3. The issue is a Cross-Site Request Forgery in admin/urlrule/add.html that enables a denial of service via adding a superseding route. The public descriptions consistently state CSRF as the root cause; no explicit exploitation details or in‑the‑wild proof are prov...

CVE-2017-16678

CVE-2017-16678 describes a Server-Side Request Forgery in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2, affecting SAP NetWeaver KM from 7.00–7.02 and KMC-BC 7.30, 7.31, 7.40, 7.50. The vulnerability lets an attacker manipulate the vulnerable application to send crafted...