EUVD-2018-7708

Malware in sbrugna...

Flexo CMS Cross-Site Request Forgery Vulnerability

Flexo CMS is an open source content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in Flexo CMS version 0.1.6. An attacker can exploit this vulnerability to add an administrator account with the help of the /admin/user/add page...

CVE-2018-15851

An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add...

CVE-2018-15851

An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add...

Cross site request forgery (csrf)

An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add...

CVE-2018-15851

An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add...

CVE-2018-15851

Flexo CMS v0.1.6 is affected by a CSRF vulnerability that can add an administrator via the /admin/user/add page. The issue is documented across multiple sources (CNVD, NVD, OSV, CVE records) and is consistently described as a CSRF leading to unauthorized admin account creation. The core impact is...

CVE-2018-15851: Cross-Site Request Forgery (CSRF)

An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add...

PT-2018-13241

Name of the Vulnerable Software and Affected Versions Flexo CMS version 0.1.6 Description A CSRF issue allows adding an administrator via the "/admin/user/add" API endpoint. Recommendations For Flexo CMS version 0.1.6, update to a version that includes a fix for this issue, if available. As a...