YzmCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-08781)

YzmCMS is an open source CMS Content Management System developed by Chinese programmer Yuan Zhimeng. A cross-site request forgery vulnerability exists in YzmCMS version 3.8. A remote attacker can add an administrator account with the help of the /index.php/admin/adminmanage/add.html page to explo...

TuziCMS Cross-Site Request Forgery Vulnerability

TuziCMS is an enterprise web content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in TuziCMS version 2.0.6. A remote attacker can exploit the vulnerability to add an administrator account...

Frog CMS Cross-Site Request Forgery Vulnerability

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. In Frog CMS version 0.9.5, a /admin/? /user/add is vulnerable to cross-site request forgery. A remote...

CVE-2018-10110

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

CVE-2018-10110

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

Design/Logic Flaw

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

CVE-2018-10110

CVE-2018-10110 affects the D-Link DIR-615 T1 router. The vulnerability is a persistent cross-site scripting (XSS) in the web admin, exploitable via the Add User feature in the Admin page. The root cause is inadequate protection of the web page structure allowing an attacker to inject and execute ...

CVE-2018-10110

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

Microsoft Office: Allow Unsecure Apps, Web add-ins and Catalogs

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013allowinsecureappscatalogs.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Allow Unsecure Apps and Catalogs Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Office: Block the Office Store

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013blockofficestore.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Block the Office Store Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...

XYHCMS Cross-Site Request Forgery Vulnerability

XYHCMS is an open source content management system CMS. A cross-site request forgery vulnerability exists in XYHCMS version 3.5. A remote attacker can exploit this vulnerability by sending an index.php?g=Manage&m=Rbac&a=addUser request to add an administrator account...

Microsoft Office: Suppress external signature services menu item

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013suppressexternalsignaturemenu.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Suppress external signature services menu item Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

PT-2018-3903 · D Link · D-Link Dir-615 T1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-615 T1 version not specified Description: The issue exists due to inadequate protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack. This can be exploited via the Add User...

Cross site request forgery (csrf)

joyplus-cms 1.6.0 has XSS via the devicename parameter in a manager/adminajax.php?action=save flag=add request...

CVE-2018-10096

joyplus-cms 1.6.0 has XSS via the devicename parameter in a manager/adminajax.php?action=save flag=add request...

Design/Logic Flaw

Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter...

CVE-2018-9991

Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter...

CVE-2018-9991

Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter...

WUZHI CMS 4.1.0 - Add User Account Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: WUZHI CMS 4.1.0 CSRF vulnerability add user account Exploit Author: taoge Vendor Homepage: https://github.com/wuzhicms/wuzhicms Software Link: https://github.com/wuzhicms/wuzhicms Version: 4.1.0 CVE : CVE-2018-9927 An issue was...

WUZHI CMS 4.1.0 - Add Admin Account Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: WUZHI CMS 4.1.0 CSRF vulnerability add admin account Exploit Author: taoge Vendor Homepage: https://github.com/wuzhicms/wuzhicms Software Link: https://github.com/wuzhicms/wuzhicms Version: 4.1.0 CVE : CVE-2018-9926 An issue was...