19 matches found
CVE-2024-48572
A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addresses via the "Add a user" feature. The vulnerability occurs due to insufficiently validated user input being processed as a regular expression, which is then matched against emai...
CVE-2024-48572
A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addresses via the "Add a user" feature. The vulnerability occurs due to insufficiently validated user input being processed as a regular expression, which is then matched against emai...
CVE-2024-48572: Incorrect Default Permissions
A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addresses via the "Add a user" feature. The vulnerability occurs due to insufficiently validated user input being processed as a regular expression, which is then matched against emai...
CVE-2024-48572
A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addresses via the "Add a user" feature. The vulnerability occurs due to insufficiently validated user input being processed as a regular expression, which is then matched against emai...
PT-2024-33151 · Aquilacms · Aquilacms
Name of the Vulnerable Software and Affected Versions: AquilaCMS versions 1.409.20 and prior Description: The issue arises from insufficient validation of user input, which is processed as a regular expression to find duplicate email addresses via the "Add a user" feature, allowing unauthenticate...
CVE-2021-41916
A Cross-Site Request Forgery CSRF vulnerability in webTareas version 2.4 and earlier allows a remote attacker to create a new administrative profile and add a new user to the new profile. without the victim's knowledge, by enticing an authenticated admin user to visit an attacker's web page...
CVE-2020-19889
DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcmspid=-70 can add a user...
CVE-2020-19889: Cross-Site Request Forgery (CSRF)
DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcmspid=-70 can add a user...
CVE-2020-12257
rConfig 3.9.4 is vulnerable to cross-site request forgery CSRF because it lacks implementation of CSRF protection such as a CSRF token. An attacker can leverage this vulnerability by creating a form add a user, delete a user, or edit a user...
PT-2020-20433
Name of the Vulnerable Software and Affected Versions LiteCart versions prior to 2.2.2 Description The issue allows for a CSRF attack via the "admin/?app=users&doc=edit user" endpoint to add a user. Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...
CVE-2020-9018: Cross-Site Request Forgery (CSRF)
LiteCart through 2.2.1 allows admin/?app=users&doc=edituser CSRF to add a user...
PT-2019-15249
Name of the Vulnerable Software and Affected Versions MetInfo version 7.0.0beta Description The issue allows for a CSRF attack, enabling an attacker to add a user account. This is achieved by sending a doSaveSetup action to the admin/index.php endpoint, for example, via an...
CVE-2018-19545: Cross-Site Request Forgery (CSRF)
JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user...
CVE-2017-17550: Cross-Site Request Forgery (CSRF)
ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affected by a CSRF vulnerability via a cgi-bin/zysh-cgi cmd action to add a user account. This account's access could, for example, subsequently be used for stored XSS...
PT-2018-14373
Name of the Vulnerable Software and Affected Versions youke365 version 1.1.5 Description The issue concerns a CSRF vulnerability in the admin/user.html endpoint. This vulnerability can be exploited to add a user account. Recommendations For youke365 version 1.1.5, consider implementing proper CSR...
PT-2018-12942
Name of the Vulnerable Software and Affected Versions OneThink version 1.1 Description An issue was discovered that allows for a CSRF vulnerability. The vulnerability can be exploited through the "admin.php?s=/User/add.html" endpoint, which can add a user. Recommendations For OneThink version 1.1...
CVE-2018-15198: Cross-Site Request Forgery (CSRF)
An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/User/add.html that can add a user...
dalbum 144 build 174 - Cross-Site Request Forgery
dalbum 144 build 174 - Cross-Site Request Forgery dalbum 144 build 174 and earlier CSRF Vulnerabilities =================================================================================== Exploit Title:dalbum 144174 and earlier CSRF Vulnerabilities Vendor: http://www.dalbum.org/ Download link...
