390 matches found
Cross site request forgery (csrf)
A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit. The manipulation of the argument id leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclos...
PT-2024-19930 · Unknown · Dreamer Cms
Name of the Vulnerable Software and Affected Versions: Dreamer CMS version 4.1.3 Description: A problematic issue was found in the software, affecting an unknown function of the file /admin/menu/toEdit. The manipulation of the id argument leads to cross-site request forgery. It is possible to...
BIT-MOODLE-2023-35131 Moodle: xss risk on groups page
Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14...
CVE-2023-49394
Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly...
Design/Logic Flaw
Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly...
CVE-2023-49394
Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly...
CVE-2023-49394
Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly...
CVE-2023-49394
CVE-2023-49394 concerns Zentao versions 4.1.3 and earlier, with a URL redirect vulnerability. The available documents identify the affected product and version range and describe the issue as a URL redirect that may prevent the system from functioning properly. No specific technical exploitation ...
Zentao Security Breach
Nature Easy Soft Network Technology ZenTao is China's easy soft Tianchuang network technology Nature Easy Soft Network Technology company's open source project management software. The software includes product management, project management, quality management and document management functions. ...
PT-2024-14522 · Spip · Spip
Name of the Vulnerable Software and Affected Versions: SPIP versions 4.1.3 and earlier SPIP versions 4.2.x through 4.2.6 Description: The issue arises from the ecrire/public/assembler.php file in SPIP, where input from request is not restricted to safe characters, such as alphanumerics, allowing...
CVE-2023-7091
A vulnerability was found in Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affects unknown code of the file /upload/uploadFile. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to...
CVE-2023-7091
Dreamer CMS 4.1.3 contains an issue in the /upload/uploadFile endpoint where manipulating the file argument allows unrestricted file upload. The vulnerability can be exploited remotely and has publicly disclosed exploit information. Supported documents consistently identify the root cause as a co...
Dreamer CMS Code Issue Vulnerability
Dreamer CMS is a Dreamer Content Management System by Junnan Wang, an individual developer in China. A code issue vulnerability exists in Dreamer CMS version 4.1.3, which originates from a code issue that can lead to the unrestricted upload of arbitrary files...
PT-2023-29864 · Grails · Grails
Name of the Vulnerable Software and Affected Versions: Grails versions prior to 3.3.17 Grails versions prior to 4.1.3 Grails versions prior to 5.3.4 Grails versions prior to 6.1.0 Description: A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework...
OESA-2023-1930 nodejs-tough-cookie security update
RFC6265 Cookies and Cookie Jar for Node.js. Security Fixes: Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects a...
Cross site request forgery (csrf)
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/database/backup...
PT-2023-31456 · Unknown · Dreamer Cms
Name of the Vulnerable Software and Affected Versions: Dreamer CMS version 4.1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/database/backup component. This allows for unauthorized actions to be performed on the system. Recommendations: For Dreamer CMS...
WESEEK GROWI Security Breach
Weseek GROWI is a team collaboration software package from Weseek Japan. A security vulnerability exists in WESEEK GROWI versions prior to v4.1.3. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
