EUVD-2018-17741

Malware in sbrugna...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...

CVE-2018-5976

Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...

CVE-2018-5976

Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...

CVE-2018-5976

CVE-2018-5976 affects RSVP Invitation Online 1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) in the application’s admin action path (function/account.php) that enables an attacker to modify the administrator password. A proof-of-concept demonstrates submitting a request to update th...

CVE-2018-5976: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...

RSVP Invitation Online 1.0 - Cross-Site Request Forgery (Update Admin)

RSVP Invitation Online 1.0 - Cross-Site Request Forgery Update Admin...

RSVP Invitation Online 1.0 - Cross-Site Request Forgery (Update Admin)

...