CVE-2020-18265: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=actaddmember"...

CVE-2020-18264: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=acteditmember"...

CVE-2020-21003

Pbootcms v2.0.3 is vulnerable to Cross Site Scripting XSS via admin.php...

Cross site scripting

Pbootcms v2.0.3 is vulnerable to Cross Site Scripting XSS via admin.php...

CVE-2020-21003

Pbootcms v2.0.3 is vulnerable to Cross Site Scripting XSS via admin.php...

CVE-2020-21003

CVE-2020-21003 affects Pbootcms v2.0.3 and is a cross-site scripting (XSS) vulnerability via admin.php. The connected documents confirm the affected product/version and that the issue is an XSS in the admin.php entry point; no further exploit details, impact scope, or remediation steps are provid...

PT-2021-10571

Name of the Vulnerable Software and Affected Versions: Pbootcms version 2.0.3 Description: The issue is related to Cross Site Scripting XSS and can be exploited via the admin.php endpoint. This allows for potential malicious script injection. Recommendations: For Pbootcms version 2.0.3, consider...

CVE-2020-21003: Improper Neutralization of Input During Web Page Generation

Pbootcms v2.0.3 is vulnerable to Cross Site Scripting XSS via admin.php...

PT-2021-3318

Name of the Vulnerable Software and Affected Versions DSGVO All in one for WP versions prior to 4.0 Description The issue is related to the failure to neutralize special elements, which can lead to cross-site scripting XSS attacks. An unauthenticated attacker can exploit this by submitting...

CVE-2020-24740

An issue was discovered in Pluck 4.7.10-dev2. There is a CSRF vulnerability that can editpage via a /admin.php?action=editpage...

Cross site request forgery (csrf)

An issue was discovered in Pluck 4.7.10-dev2. There is a CSRF vulnerability that can editpage via a /admin.php?action=editpage...

CVE-2020-24740

An issue was discovered in Pluck 4.7.10-dev2. There is a CSRF vulnerability that can editpage via a /admin.php?action=editpage...

PT-2021-11069

Name of the Vulnerable Software and Affected Versions: Pluck version 4.7.10-dev2 Description: An issue was discovered that allows a CSRF vulnerability, enabling the editing of pages via the "/admin.php?action=editpage" API endpoint. This issue can potentially be exploited to modify pages without...

CVE-2020-24740: Cross-Site Request Forgery (CSRF)

An issue was discovered in Pluck 4.7.10-dev2. There is a CSRF vulnerability that can editpage via a /admin.php?action=editpage...

PT-2021-10154

Name of the Vulnerable Software and Affected Versions: Pluck CMS version 4.7.9 Description: The issue allows remote attackers to execute arbitrary code and delete a specific article via the component "/admin.php?action=page". This is a Cross Site Request Forgery CSRF issue. Recommendations: For...

PT-2021-10155

Name of the Vulnerable Software and Affected Versions: Pluck CMS version 4.7.9 Description: The issue allows remote attackers to execute arbitrary code and delete specific images via the component "/admin.php?action=images". This is a Cross Site Request Forgery CSRF issue. Recommendations: For...

CVE-2020-18198: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component " /admin.php?action=images."...

CVE-2020-18195: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete a specific article via the component " /admin.php?action=page."...

CVE-2020-19199

A Cross Site Request Forgery CSRF vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code...

CVE-2020-19199

PHPOK 5.2.060 is affected by a CSRF vulnerability in admin.php?c=admin&f=save that could let a remote attacker execute arbitrary code. Affected component is PHPOK’s admin save endpoint; root cause is a CSRF flaw enabling code execution. Multiple sources (NVD entry CVE-2020-19199 and partner discl...