Lucene search
+L

68 matches found

Prion
Prion
added 2022/01/19 11:15 p.m.19 views

Cross site request forgery (csrf)

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

4.3CVSS6.5AI score0.00416EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/01/19 11:4 p.m.18 views

CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

5.5AI score0.00441EPSS
SaveExploits1References1
CVE
CVE
added 2022/01/19 11:1 p.m.56 views

CVE-2021-46027

CVE-2021-46027 concerns a CSRF vulnerability in the background blog management of mysiteforme . The description across sources states an attacker can craft a malicious link and, when a site administrator clicks it, a blog tag is added, indicating a cross-site request forgery in the backend admini...

6.5CVSS6.4AI score0.00416EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/01/19 11:1 p.m.29 views

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

6.7AI score0.00416EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/01/19 12:0 a.m.9 views

Mysiteforme 跨站请求伪造漏洞

Mysiteforme is a permission management system. A cross-site request forgery vulnerability exists in mysiteforme, which stems from a lack of validation for cross-site request forgery in the backend blog administration. An attacker could use a forged malicious request to trick a victim into clickin...

6.5CVSS5.4AI score0.00416EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/01/19 12:0 a.m.10 views

PT-2022-12511 · Unknown · Mysiteforme

Name of the Vulnerable Software and Affected Versions: mysiteforme affected versions not specified Description: The issue concerns a Cross Site Scripting XSS vulnerability via the add blog tag function in the background blog management. This allows for potential malicious script execution...

5.4CVSS6AI score0.00441EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/01/19 12:0 a.m.7 views

Mysiteforme 跨站脚本漏洞

Mysiteforme is a permission management system. mysiteforme suffers from a cross-site scripting vulnerability that stems from the lack of user-supplied data and output data validation filtering in the blog tagging function of the backend blog management. An attacker could exploit the vulnerability...

5.4CVSS5.6AI score0.00441EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/01/19 12:0 a.m.16 views

PT-2022-12512 · Unknown · Mysiteforme

Name of the Vulnerable Software and Affected Versions: mysiteforme affected versions not specified Description: The issue concerns a CSRF vulnerability in the background blog management of mysiteforme. An attacker can construct a malicious link that, when clicked by an administrator, results in t...

6.5CVSS7AI score0.00416EPSS
SaveExploits1References3
Rows per page
Query Builder