CVE-2020-18694

Cross Site Request Forgery CSRF in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/saveprofile"...

CVE-2020-18694

Cross Site Request Forgery CSRF in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/saveprofile"...

CVE-2020-18694

Cross Site Request Forgery CSRF in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/saveprofile"...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/saveprofile"...

CVE-2020-18694

Cross Site Request Forgery CSRF in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/saveprofile"...

CVE-2020-18694

Cross Site Request Forgery CSRF in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/saveprofile"...

CVE-2020-18694

CVE-2020-18694 is a CSRF vulnerability in IgnitedCMS v1.0. The issue allows remote attackers to obtain sensitive information and gain privileges via the component “/admin/profile/save_profile.” Affected product: IgnitedCMS v1.0 (per multiple sources). The Red Hat/NVD/OSV/CNNVD entries confirm the...

IgnitedCMS 跨站请求伪造漏洞

Ignited CMS is a content management system CMS. A cross-site request forgery vulnerability exists in IgnitedCMS, which stems from the product /admin/profile/saveprofile failing to validate that a request is from a trusted user. This vulnerability can be exploited to obtain sensitive information a...

PT-2021-10212 · Unknown · Ignited Cms

Name of the Vulnerable Software and Affected Versions: IgnitedCMS version 1.0 Description: The issue allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/save profile". This is a Cross Site Request Forgery CSRF issue, which can be exploited ...