idreamsoft iCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-19090)

idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in the admincp.php file in version 7.0.11 of idreamsoft iCMS. The vulnerability stems from the detection of CSRFTOKEN when it does not exist, and the program...

CVE-2017-9934

Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability...

CVE-2017-9934: Improper Neutralization of Input During Web Page Generation

Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability...

CVE-2016-4504: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and Pro Unlimited all versions. There is no CSRF Token generated per page or per function...

Kimai.org Cross Site Request Forgery

Affected software: http://kimai.org Type of vulnerability: csrf URL: http://demo.kimai.org Discovered by: Provensec Website: http://www.provensec.com Description: csrf vulnerability in status edit mechanism due to no csrf token Proof of concept:...

ProActive CMS XSS / CSRF / Open Redirect

Exploit Title: ProActive CMS Multiple Vulnerabilities Google Dork: intext:"Powered by Proactive CMS" Exploit Author: Rafay Baloch Vendor Homepage: http://www.proactivecms.com Tested on: Linux Stored Cross Site Scripting: http://professional.inbusiness.com.au/admin.php?action=newuser Insert Your...