CVE-2021-31679

The CVE-2021-31679 entry concerns PESCMS-V2.3.3 and describes a CSRF vulnerability that allows an attacker to delete admin and other members’ account numbers. Affected component is the web application’s account-management flow; root cause is insufficient CSRF protection enabling unauthorized stat...

CVE-2021-31679

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers...

CVE-2021-31679

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers...

CVE-2021-31677

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords...

CVE-2021-31677

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords...

CVE-2021-31677

CVE-2021-31677 concerns PESCMS-V2.3.3, where a cross-site request forgery (CSRF) vulnerability can modify passwords for administrators and other members. The issue is described consistently across sources as affecting PESCMS version 2.3.3 and enabling unauthorized password changes via CSRF. Publi...

CVE-2021-31676

A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction...

CVE-2021-31676

A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction...

CVE-2021-31676

CVE-2021-31676 affects PESCMS v2.3.3. The vulnerability is a reflected XSS in the application, arising from missing data validation on user input/output in App/Team/GET/Report.php. When combined with CSRF in the same file, it can enable larger client-side impact. The connected Red Hat and CNVD re...

CVE-2021-31679: Cross-Site Request Forgery (CSRF)

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers...

PT-2022-10045

Name of the Vulnerable Software and Affected Versions PESCMS version 2.3.3 Description A reflected XSS issue was found, which when combined with a CSRF in the same file, can lead to more significant damage. Recommendations For version 2.3.3, at the moment, there is no information about a newer...

CVE-2021-31676: Improper Neutralization of Input During Web Page Generation

A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction...

PESCMS Cross-Site Script Vulnerabilities

A cross-site scripting vulnerability exists in PESCMS version V2.3.3, a content publishing platform. The vulnerability stems from App/Team/GET/Report.php missing a data validation filter for user-supplied data and output. An attacker could exploit the vulnerability to execute JavaScript code on t...

CVE-2021-31677: Cross-Site Request Forgery (CSRF)

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords...

PESCMS Cross-Site Request Forgery Vulnerability

PESCMS is a content publishing platform. A security vulnerability exists in PESCMS version V2.3.3. An attacker exploited the vulnerability to delete user company related information...

PT-2022-10047

Name of the Vulnerable Software and Affected Versions PESCMS version 2.3.3 Description An issue was discovered in PESCMS where there is a CSRF vulnerability that can delete import information about a user's company. Recommendations For PESCMS version 2.3.3, as a temporary workaround, consider...

CVE-2021-31678: Cross-Site Request Forgery (CSRF)

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user's company...

PT-2022-10046

Name of the Vulnerable Software and Affected Versions PESCMS version 2.3.3 Description An issue was discovered in PESCMS where there is a CSRF vulnerability that can modify admin and other members' passwords. Recommendations For PESCMS version 2.3.3, consider implementing CSRF protection measures...

PT-2022-10048

Name of the Vulnerable Software and Affected Versions PESCMS version 2.3.3 Description An issue was discovered that allows attackers to delete admin and other members' account numbers due to a CSRF vulnerability. Recommendations For PESCMS version 2.3.3, consider implementing CSRF protection...

PESCMS TEAM 2.3.2 Cross Site Scripting

Exploit Title: PESCMS TEAM 2.3.2 - Multiple Reflected XSS Date: 2020-11-18 Exploit Author: icekam Vendor Homepage: https://www.pescms.com/ Software Link: https://github.com/lazyphp/PESCMS-TEAM Version: PESCMS Team 2.3.2 CVE: CVE-2020-28092 PESCMS Team 2.3.2 has multiple reflected XSS via the id...