Cross site request forgery (csrf)

A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit...

CVE-2020-19264

A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd...

CVE-2020-19264

MipCMS v5.0.1 has a cross-site request forgery (CSRF) vulnerability in the user-creation path index.php?s=/user/ApiAdminUser/itemAdd. The root cause is insufficient validation/CSRF protection, allowing an attacker to arbitrarily add users without authentication. The CVE-2020-19264 entry is refere...

CVE-2020-19263

CVE-2020-19263 is a CSRF vulnerability in MipCMS v5.0.1 that allows an attacker to arbitrarily escalate privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit. The NVD entry documents this as a CSRF with the impact of elevating privileges (C/H/I/A high) and a CVSS v3.1 base score...

CVE-2020-19263

A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit...

PT-2021-10313

Name of the Vulnerable Software and Affected Versions: MipCMS version 5.0.1 Description: A cross-site request forgery CSRF issue allows attackers to arbitrarily add users via the "index.php?s=/user/ApiAdminUser/itemAdd" API endpoint. This enables unauthorized access to add new users...

MipCMS Cross-Site Request Forgery Vulnerability

MipCMS is a software application. A set of content management system based on Baidu Mobile Accelerator MIP and development, but also a set of SEO site building system. MipCMS version 5.0.1 has a security vulnerability, the vulnerability stems from the lack of valid validation in the software...

PT-2021-10312

Name of the Vulnerable Software and Affected Versions: MipCMS version 5.0.1 Description: A cross-site request forgery CSRF issue allows attackers to escalate user privileges to administrator. This can be achieved via the "index.php?s=/user/ApiAdminUser/itemEdit" endpoint, by exploiting the lack o...

CVE-2020-19264: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd...

CVE-2020-19263: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit...

MipCMS Cross-Site Request Forgery Vulnerability

MipCMS is a software application. A content management system based on Baidu Mobile Accelerator MIP and is also a SEO site building system. A security vulnerability exists in MipCMS version 5.0.1, which originates from the lack of valid validation for index.php?s=/user/ApiAdminUser/itemEdit in th...

MipCMS server-side request forgery vulnerability

MipCMS is an application software. A content management system based on Baidu Mobile Accelerator MIP and an SEO website building system. mipCMS 5.0.1 has a server-side request forgery vulnerability that can be exploited by attackers to access sensitive information...

CVE-2020-20582

A server side request forgery SSRF vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information...

CVE-2020-20582

A server side request forgery SSRF vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information...

Server side request forgery (ssrf)

A server side request forgery SSRF vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information...

CVE-2020-20582

A server side request forgery SSRF vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information...

CVE-2020-20582

A server side request forgery SSRF vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information...

CVE-2020-20582

MipCMS 5.0.1 contains a server-side request forgery (SSRF) in /ApiAdminDomainSettings.php that can be exploited to access sensitive information. The issue is confirmed across multiple connected sources (CVE listings and vendor/ CNVD-type records) and is described consistently as an SSRF affecting...

PT-2021-10506

Name of the Vulnerable Software and Affected Versions: MipCMS version 5.0.1 Description: A server side request forgery SSRF vulnerability in the "/ApiAdminDomainSettings.php" API endpoint allows attackers to access sensitive information. Recommendations: For MipCMS version 5.0.1, as a temporary...

CVE-2020-20582: Server-Side Request Forgery (SSRF)

A server side request forgery SSRF vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information...