Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the pfs.editfolder.php process. An attacker can modify folder metadata, such as title, description, or visibility flags, by tricking an authenticated user into visiting a malicious page that submi...

CVE-2021-36609

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php...

CVE-2021-36609

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php...

CVE-2021-36609

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php...

webTareas Cross-Site Scripting Vulnerabilities

webTareas is a web-based open source collaboration tool. The product supports project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.2p1, which originated from a cross-site scripting vulnerability found in the Name field...

CVE-2021-26216

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

CVE-2021-26216

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

PT-2021-16966

Name of the Vulnerable Software and Affected Versions SeedDMS versions 5.1.x Description The issue is related to cross-site request forgery CSRF in the out.EditFolder.php file. This means an attacker could potentially trick a user into performing unintended actions on the web application...

SeedDMS Cross-Site Request Forgery Vulnerability

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditFolder.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...