9 matches found
EUVD-2018-17741
Malware in sbrugna...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...
CVE-2018-5976
Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...
CVE-2018-5976
CVE-2018-5976 affects RSVP Invitation Online 1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) in the application’s admin action path (function/account.php) that enables an attacker to modify the administrator password. A proof-of-concept demonstrates submitting a request to update th...
CVE-2018-5976
Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...
PT-2018-17262
Name of the Vulnerable Software and Affected Versions: RSVP Invitation Online version 1.0 Description: A Cross Site Request Forgery CSRF issue exists, allowing modification of the admin password via the function/account.php endpoint. Recommendations: For RSVP Invitation Online version 1.0, consid...
CVE-2018-5976: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...
