Lucene search
+L

2 matches found

CNVD
CNVD
•added 2018/08/21 12:00 a.m.•14 views

daveismyname simple-cms cross-site request forgery vulnerability

daveismyname simple-cms is a content management system CMS. A cross-site request forgery vulnerability exists in daveismyname simple-cms version 2014-03-11 and earlier. A remote attacker can exploit this vulnerability to delete arbitrary pages with the help of the admin/?delpage=8 URL...

8.8CVSS8.9AI score0.00465EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/20 12:00 a.m.•5 views

CVE-2018-15564: Cross-Site Request Forgery (CSRF)

An issue was discovered in daveismyname simple-cms through 2014-03-11. There is a CSRF vulnerability that can delete any page via admin/?delpage=8...

8.8CVSS7.8AI score0.00465EPSS
SaveExploits0References2
Rows per page
Query Builder