Lucene search
+L

11 matches found

NVD
NVD
•added 2026/01/15 4:16 p.m.•14 views

CVE-2021-47754

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

6.9CVSS0.00236EPSS
SaveExploits1References3
OSV
OSV
•added 2026/01/15 4:16 p.m.•18 views

CVE-2021-47754

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

6.5CVSS5.7AI score0.00236EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/01/15 3:52 p.m.•10 views

CVE-2021-47754 Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

6.9CVSS5.8AI score0.00236EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/01/15 3:52 p.m.•8 views

CVE-2021-47754

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

6.9CVSS5.3AI score0.00236EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2026/01/15 3:52 p.m.•36 views

CVE-2021-47754

Arunna 1.0.0 is affected by a cross-site request forgery (CSRF) vulnerability (CVE-2021-47754). The issue allows an attacker to manipulate user profile settings without authentication by tricking an authenticated user into submitting a malicious form, enabling changes to user details such as pass...

6.9CVSS5.8AI score0.00236EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/15 12:00 a.m.•3 views

CVE-2021-47754: Cross-Site Request Forgery (CSRF)

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

6.9CVSS5.8AI score0.00236EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/15 12:00 a.m.•16 views

PT-2026-3031

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

6.9CVSS6.7AI score0.00236EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/01/15 12:00 a.m.•21 views

Arunna security vulnerabilities

Arunna is a social media framework developed by Arunna’s individual developer. Version 1.0.0 of Arunna contains security vulnerabilities; these vulnerabilities stem from the lack of authentication, which may lead to cross-site request forgery attacks, thereby manipulating user profile settings...

6.9CVSS5.7AI score0.00236EPSS
SaveExploits1References4
Packet Storm
Packet Storm
•added 2021/12/16 12:00 a.m.•311 views

Arunna 1.0.0 Cross Site Request Forgery

Exploit Title: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery CSRF Date: November 29, 2021 Exploit Author: =LL= Detailed Bug Description: https://lyhinslab.org/index.php/2021/11/29/how-white-box-hacking-works-xss-csrf-in-arunna/ Vendor Homepage: https://github.com/arunna Software Link:...

1AI score
SaveExploits0
zdt
zdt
•added 2021/12/16 12:00 a.m.•194 views

Arunna 1.0.0 - (Multiple) Cross-Site Request Forgery Vulnerability

Exploit Title: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery CSRF Exploit Author: =LL= Detailed Bug Description: https://lyhinslab.org/index.php/2021/11/29/how-white-box-hacking-works-xss-csrf-in-arunna/ Vendor Homepage: https://github.com/arunna Software Link:...

1.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2021/12/16 12:00 a.m.•445 views

Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)

Exploit Title: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery CSRF Date: November 29, 2021 Exploit Author: =LL= Detailed Bug Description: https://lyhinslab.org/index.php/2021/11/29/how-white-box-hacking-works-xss-csrf-in-arunna/ Vendor Homepage: https://github.com/arunna Software Link:...

5.3AI score
SaveExploits0
Rows per page
Query Builder