CVE-2019-16059

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...

CVE-2019-16059

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...

Cross site request forgery (csrf)

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...

CVE-2019-16059

CVE-2019-16059 affects Sentrifugo 3.2 and is described across multiple sources (NVD, Red Hat, CVE lists) as lacking CSRF protection, which could allow an attacker to trick an administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page. The connected docu...

CVE-2019-16059

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...

PT-2019-14497

Name of the Vulnerable Software and Affected Versions Sentrifugo version 3.2 Description The issue lacks CSRF protection, which could allow an attacker to trick the administrator into executing arbitrary code. This can be achieved by accessing the "index.php/dashboard/viewprofile" API endpoint vi...

CVE-2019-16059: Cross-Site Request Forgery (CSRF)

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...

CVE-2019-15814

Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML...

CVE-2019-15813

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell...

CVE-2019-15814

Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML...

CVE-2019-15813

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell...

Cross site scripting

Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML...

CVE-2019-15814

Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML...

CVE-2019-15814

CVE-2019-15814 affects Sentrifugo 3.2 and is a stored cross-site scripting (XSS) vulnerability. Multiple stored XSS flaws in the web application could allow authenticated users to inject arbitrary script/HTML, with public PoCs and an Exploit-DB entry indicating potential session riding and possib...

CVE-2019-15813

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell...

CVE-2019-15813

CVE-2019-15813 affects Sentrifugo 3.2 and involves file-upload restriction bypasses that can allow an authenticated user to execute arbitrary code via a webshell. The available connected documents confirm the vulnerability in the product and describe its impact (RCE via uploaded webshell) and the...

PT-2019-14403

Name of the Vulnerable Software and Affected Versions Sentrifugo version 3.2 Description The issue allows authenticated users to bypass multiple file upload restrictions, potentially enabling them to execute arbitrary code via a webshell. Recommendations For Sentrifugo version 3.2, update to a...

CVE-2019-15813: Unrestricted Upload of File with Dangerous Type

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell...

CVE-2019-15814: Improper Neutralization of Input During Web Page Generation

Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML...

PT-2019-14404

Name of the Vulnerable Software and Affected Versions Sentrifugo version 3.2 Description The issue concerns multiple stored XSS vulnerabilities. These vulnerabilities could allow authenticated users to inject arbitrary web script or HTML. Recommendations For Sentrifugo version 3.2, update to a...