11964 matches found
CVE-2018-13340
Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request...
Cross site request forgery (csrf)
Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request...
CVE-2018-13340
Gleez CMS 1.2.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability. Multiple connected sources describe the vulnerability and its impact: an unauthenticated CSRF condition can trigger a /page/add operation, enabling creation of new pages (and logs in at least one report). The CNVD e...
CVE-2018-13340
Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request...
DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin) Vulnerability
Exploit for php platform in category web applications...
CVE-2018-13056
An issue was discovered on zzcms 8.3. There is a vulnerability at /user/del.php that can delete any file by placing its relative path into the zzcmsmain table and then making an img add request. This can be leveraged for database access by deleting install.lock...
WSTMall Cross-Site Request Forgery Vulnerability
WSTMall is an open source O2O e-commerce system developed using ThinkPHP framework and supporting multiple users. A cross-site request forgery vulnerability exists in WSTMall version 1.9.1170316. A remote attacker can add user accounts with the help of index.php?m=Admin&c=Users&a=edit URI to...
UBUNTU-CVE-2018-13053
The alarmtimernsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktimeaddsafe is not used...
DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin)
history.pushState'', '', '/'...
DAMICMS 6.0.0 Cross Site Request Forgery
history.pushState'', '', '/' a " /...
DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin)
DAMICMS 6.0.0 - Cross-Site Request Forgery Add Admin history.pushState'', '', '/'...
Cross site request forgery (csrf)
OpenSID 18.06-pasca has a CSRF vulnerability. This vulnerability can add an account at the admin level via the index.php/manuser/insert URI...
PT-2018-9485
Name of the Vulnerable Software and Affected Versions dom4j versions prior to 2.1.1 Description The issue is related to an XML Injection vulnerability in the Class: Element, specifically in the addElement and addAttribute methods. This can result in an attacker tampering with XML documents throug...
CVE-2018-13010
WSTMall v1.9.1170316 has CSRF via the index.php?m=Admin&c=Users&a=edit URI to add a user account...
BEESCMS 4.0 - Cross-Site Request Forgery (Add Admin)(CVE-2018-12739)
history.pushState'', '', '/'...
RabbitMQ Web Management < 3.7.6 - Cross-Site Request Forgery (Add Admin)
Add RabbitMQ Admin window.onload = rabbit.submit...
BEESCMS 4.0 - Cross-Site Request Forgery (Add Admin)
Exploit Title: A CSRF vulnerability exists in BEESCMSV4.0: The administrator can be added arbitrarily. Date: 2018-06-25 Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9226389.html Software Link: http://www.beescms.com/ Version: BEESCMS - V4.0 CVE : CVE-2018-12739 A CSRF...
Design/Logic Flaw
joyplus-cms 1.6.0 has XSS in adminplayer.php, related to manager/index.php "system manage" and "add" actions...
