CVE-2021-37366

CTparental before 4.45.03 is vulnerable to cross-site request forgery CSRF in the CTparental admin panel. By combining CSRF with XSS, an attacker can trick the administrator into clicking a link that cancels the filtering for all standard users...

CVE-2021-37366

CVE-2021-37366 affects CTparental prior to version 4.45.03. The vulnerability is a cross-site request forgery (CSRF) in the CTparental admin panel, which—when combined with an XSS vector—could trick an administrator into clicking a link that cancels filtering for all standard users. The available...

CVE-2021-37367

CTparental before 4.45.07 is affected by a code execution vulnerability in the CTparental admin panel. Because The file "blcategorieshelp.php" is vulnerable to directory traversal, an attacker can create a file that contains scripts and run arbitrary commands...

CVE-2021-37367

CVE-2021-37367 affects CTparental before 4.45.07. The connected sources describe a directory traversal flaw in the admin panel caused by the file bl_categories_help.php, which can be exploited to create a file containing scripts and run arbitrary commands (code execution). Technical details from ...

CTparental 跨站请求伪造漏洞

CTparental is a tool for filtering web content. Inappropriate content can be filtered using blacklists or whitelists, the time spent browsing the Internet can be controlled and the active time of the control device can be controlled. marsat CTparental suffers from a cross-site request forgery...

CTparental 路径遍历漏洞

CTparental is a tool for filtering web content. Inappropriate content can be filtered using blacklists or whitelists, the time spent browsing the Internet can be controlled and the active time of the control device can be controlled. CTparental suffers from a path traversal vulnerability that ste...