CVE-2020-37091 Maian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin)

Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attackers to create administrative accounts without authentication. Attackers can craft malicious HTML forms to add admin users and upload PHP files with unrestricted file upload capabilities through the FA...

The vulnerability of the client request handler of the security access control system, IED Siemens RUGGEDCOM CROSSBOW, allows a perpetrator to enhance their privileges.

The vulnerability of the client request handler of the Siemens RUGGEDCOM CROSSBOW access control system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges by adding user accounts to administrative groups...

CVE-2022-26173: Cross-Site Request Forgery (CSRF)

JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery CSRF via http://targethost:port/jforum-2.8.0/jforum.page, which allows attackers to arbitrarily add admin accounts...

PT-2022-17706

Name of the Vulnerable Software and Affected Versions JForum version 2.8.0 Description The issue allows attackers to perform a Cross-Site Request Forgery CSRF attack via the "http://target host:port/jforum-2.8.0/jforum.page" endpoint, enabling them to arbitrarily add admin accounts. Recommendatio...

CVE-2020-21139

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add...

PT-2021-10595

Name of the Vulnerable Software and Affected Versions: EC Cloud E-Commerce System version 1.3 Description: The issue allows attackers to arbitrarily add admin accounts via the /admin.html?do=user&act=add endpoint. This is due to a Cross-Site Request Forgery CSRF in the EC Cloud E-Commerce System...

CVE-2020-21139: Cross-Site Request Forgery (CSRF)

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add...

sftnow Cross-Site Request Forgery Vulnerability

sftnow is an enterprise portal system which includes news category management, release management and permission management. A cross-site request forgery vulnerability exists in sftnow 2018-12-29 and earlier versions, which can be exploited by remote attackers to add admin accounts...

PT-2017-10052

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance IWSVA versions prior to 6.5 CP 1737 Description A privilege escalation issue allows authenticated, remote users with least privileges to change the Master Admin's password and/or add new adm...