632 matches found
CVE-2023-49376
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/delete...
CVE-2023-49376
CVE-2023-49376 corresponds to a CSRF vulnerability affecting JFinalCMS v5.0.0, exploitable via the /admin/tag/delete endpoint. The NVD entry notes a high-severity vector (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8). Connected advisories also confirm the issue originates from CS...
PT-2023-31232
Name of the Vulnerable Software and Affected Versions JFinalCMS version 5.0.0 Description The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "admin/nav/delete" endpoint. Recommendations For JFinalCMS version 5.0.0, as a temporary workaround, consider...
PT-2023-31231
Name of the Vulnerable Software and Affected Versions JFinalCMS version 5.0.0 Description A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS. The vulnerability can be exploited via the "/admin/nav/update" API endpoint. Recommendations For JFinalCMS version 5.0.0, update to a...
CVE-2023-49446: Cross-Site Request Forgery (CSRF)
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/save...
PT-2023-31204 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS, which can be exploited via the /admin/category/delete API endpoint. This allows an attacker to perform unauthorized actions on the...
CVE-2023-49379
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /admin/friendlink/save...
CVE-2023-49375
CVE-2023-49375 affects JFinalCMS v5.0.0 with a Cross-Site Request Forgery (CSRF) vulnerability via the /admin/friend_link/update endpoint. The NVD entry reports CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no user privileges, and required user interaction. Multiple connected adviso...
CVE-2023-49375: Cross-Site Request Forgery (CSRF)
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/friendlink/update...
CVE-2023-49379
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /admin/friendlink/save...
JFinalCMS Security Vulnerability
JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS v5.0.0, which originates from a cross-site request forgery vulnerability in the /admin/slide/delete component...
CVE-2023-49398
JFinalCMS 5.0.0 contains a CSRF vulnerability exploitable via the /admin/category/delete endpoint. The CVE-2023-49398 entry notes CSRF with high impact (confidentiality/ integrity/ availability affected) and no exploitation details are provided in the connected documents. The linked PT-2023-31204...
CVE-2023-49372
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...
CVE-2023-49398
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/delete...
CVE-2023-49383
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/save...
CVE-2023-49376
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/delete...
CVE-2023-49395
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/update...
CVE-2023-49398
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/delete...
JFinalCMS Security Vulnerability
JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS v5.0.0, which originates from a cross-site request forgery vulnerability in the /admin/slide/save component...