CVE-2021-33396

Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...

CVE-2022-38931

A Server-Side Request Forgery SSRF in fetchnetfileupload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter...

EUVD-2020-18505

Malware in sbrugna...

EUVD-2018-8526

Malware in sbrugna...

EUVD-2019-17106

Malware in sbrugna...

EUVD-2018-2575

Malware in sbrugna...

EUVD-2018-2295

Malware in sbrugna...

EUVD-2021-20102

Malware in sbrugna...

EUVD-2018-8525

Malware in sbrugna...

EUVD-2018-2323

Malware in sbrugna...

CVE-2022-45942

A Remote Code Execution RCE vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4...

CVE-2020-25873

A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the "id" parameter...

CVE-2018-10503

An issue was discovered in index.php in baijiacms V4 v41420170105. CSRF allows adding an administrator account via op=edituser, changing the administrator password via op=changepwd, or deleting an account via op=deleteuser...

CVE-2021-33396

Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...

CVE-2021-33396

Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...

CVE-2021-33396

Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...

CVE-2021-33396: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...

CVE-2021-33396

Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...

CVE-2021-33396

The CVE-2021-33396 entry describes a CSRF vulnerability in BaijiaCMS 4.1.4 that allows an attacker to change the password or other data of an arbitrary account via index.php. The root cause is CSRF in the account-management flow; impact is high for integrity (unauthorized changes) with no confide...