Lucene search
+L

4 matches found

Kitploit
Kitploit
•added 2026/10/05 12:18 a.m.•11 views

CVE-2020-18326

Subrion CMS 4.2.1 - 크로스 사이트 요청 위조CSRF 관리자 사용자 추가 설명 Subrion CMS는 설치가 쉽고 관리가 간단합니다. 단독 애플리케이션으로 사용하거나 다른 애플리케이션과 함께 사용하여 초급 사이트, 중형 또는 대형 사이트를 만들 수 있습니다. Intelliants Subrion CMS v4.2.1의 Members 관리자 기능에서 크로스 사이트 요청 위조CSRF 취약점이 존재하며, 이를 통해 원격의 인증되지 않은 악의적인 사용자가 피해자에게 승인된 요청을 전송하고 임의의 관리자 사용자를 성공적으로...

8.8CVSS8AI score0.02243EPSS
SaveExploits2
Github Security Blog
Github Security Blog
•added 2022/03/05 12:00 a.m.•92 views

Cross Site Request Forgery in intelliants/subrion

Cross Site Request Forgery CSRF vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user...

8.8CVSS8.6AI score0.02243EPSS
SaveExploits2References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/04 12:00 a.m.•14 views

PT-2022-8592

Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS version 4.2.1 Description A Cross Site Request Forgery CSRF issue exists via the Members administrator function, allowing a remote unauthenticated malicious user to send an authorized request to a victim and successfull...

8.8CVSS7.3AI score0.02243EPSS
SaveExploits2References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/04 12:00 a.m.•6 views

CVE-2020-18326: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user...

8.8CVSS7.9AI score0.02243EPSS
SaveExploits2References4
Rows per page
Query Builder