CVE-2018-16345

An issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin password via index.php?s=/admin/rbacuser/update/navTabId/listusers/callbackType/closeCurrent...

CVE-2018-16345

Affected software: EasyCMS 1.5. Vulnerability: Cross-Site Request Forgery (CSRF) allows updating the administrator password via index.php?s=/admin/rbacuser/update/navTabId/listusers/callbackType/closeCurrent. Root cause: insufficient CSRF protection on the admin-update endpoint. Impact: unauthori...

PT-2018-13505

Name of the Vulnerable Software and Affected Versions EasyCMS version 1.5 Description An issue was discovered that allows for a CSRF vulnerability, enabling the update of the admin password. This is achieved via the index.php?s=/admin/rbacuser/update/navTabId/listusers/callbackType/closeCurrent...

CVE-2018-16345: Cross-Site Request Forgery (CSRF)

An issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin password via index.php?s=/admin/rbacuser/update/navTabId/listusers/callbackType/closeCurrent...

CVE-2018-12971

EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users...

Cross site request forgery (csrf)

EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users...

CVE-2018-12971

EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users...

CVE-2018-12971

EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users...

CVE-2018-12971

EasyCMS 1.3 is affected by a CSRF vulnerability that allows deleting users via the index.php?s=/admin/user/delAll URI. Multiple sources (NVD/NVD-derived entries, CVE lists, CNVD) corroborate that this is a CSRF flaw targeting the admin user deletion endpoint. The exact impact is deletion of users...

CVE-2018-12971: Cross-Site Request Forgery (CSRF)

EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users...

PT-2018-11504

Name of the Vulnerable Software and Affected Versions EasyCMS version 1.3 Description The issue allows for CSRF via the "index.php?s=/admin/user/delAll" URI to delete users. Recommendations For EasyCMS version 1.3, consider implementing proper CSRF protection mechanisms, such as token-based...

EasyCMS Cross-Site Request Forgery Vulnerability

EasyCMS is a scalable lightweight open source content management system CMS written in PHP. A cross-site request forgery vulnerability exists in EasyCMS version 1.3. A remote attacker can exploit this vulnerability to delete users with the help of index.php?s=/admin/user/delAll URI...

EasyCMS Cross-Site Scripting Vulnerability (CNVD-2018-08985)

EasyCMS is a lightweight scalable open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in EasyCMS version 1.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the title, keyword, abstract and content...

CVE-2018-10527

EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.htmllistarticle URI...

Cross site scripting

EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.htmllistarticle URI...

CVE-2018-10527

EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.htmllistarticle URI...

CVE-2018-10527

CVE-2018-10527 affects EasyCMS 1.3 and is described as a Stored XSS vulnerability. The issue affects four input fields when posting an article: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.html#listarticle URI. The related documents confirm the existence of the...

CVE-2018-10527

EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.htmllistarticle URI...

CVE-2018-10527: Improper Neutralization of Input During Web Page Generation

EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.htmllistarticle URI...

PT-2018-9946

Name of the Vulnerable Software and Affected Versions: EasyCMS version 1.3 Description: The issue concerns a Stored XSS problem that occurs when posting an article. Four fields are affected: title, keyword, abstract, and content. This can be demonstrated through the...