444 matches found
Cscms Cross-Site Scripting Vulnerability (CNVD-2019-07948)
CScms is a content management system CMS developed on a CI framework. A cross-site scripting vulnerability exists in the admin.php/pay page in Cscms version 4.1.0. A remote attacker can exploit the vulnerability to change the paypal account...
CVE-2019-9598
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...
CVE-2019-9598
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...
Cross site request forgery (csrf)
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...
CVE-2019-9598
The CVE-2019-9598 entry describes a CSRF vulnerability in Cscms 4.1.0, specifically in the admin.php/pay flow, that allows an attacker to change the payment account and redirect funds. Documents confirm affected software (Cscms 4.1.0) and the vulnerability class (CSRF) with the underlying impact ...
CVE-2019-9598
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...
CVE-2019-9598: Cross-Site Request Forgery (CSRF)
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...
PT-2019-19738
Name of the Vulnerable Software and Affected Versions Cscms version 4.1.0 Description An issue in Cscms allows for a CSRF vulnerability through the admin.php/pay endpoint, potentially enabling an attacker to change the payment account and redirect funds. Recommendations For Cscms version 4.1.0, a...
CVE-2019-6779
Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links...
CVE-2019-6779
Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links...
Cross site request forgery (csrf)
Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links...
CVE-2019-6779
Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links...
CVE-2019-6779
CVE-2019-6779 affects CSCMS 4.1.8. The vulnerability is a CSRF flaw on the admin.php/links/save endpoint, enabling an attacker to add, modify, or delete friend links without providing proper authorization. Root cause stated is lack of CSRF protection on that admin action; exploitation details are...
CVE-2019-6779: Cross-Site Request Forgery (CSRF)
Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links...
PT-2019-18338
Name of the Vulnerable Software and Affected Versions Cscms version 4.1.8 Description The issue allows for a CSRF attack on the "admin.php/links/save" endpoint to add, modify, or delete friend links. Recommendations For version 4.1.8, update to a newer version that includes a fix for this issue, ...
CVE-2018-17126
CScms 4.1 allows remote code execution, as demonstrated by 1';eval$POSTcmd; in Web Name to upload\plugins\sys\Install.php...
Remote code execution
CScms 4.1 allows remote code execution, as demonstrated by 1';eval$POSTcmd; in Web Name to upload\plugins\sys\Install.php...
Arbitrary file deletion
CScms 4.1 allows arbitrary directory deletion via a dir=..\ substring to plugins\sys\admin\Plugins.php...