EUVD-2020-10192

Malware in sbrugna...

EUVD-2020-10191

Malware in sbrugna...

CVE-2020-18265

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=actaddmember"...

CVE-2020-18264

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=acteditmember"...

Simple-Log Cross-Site Request Forgery Vulnerability

Simple-Log is an open source free blog system based on PHP+MySQL. A cross-site request forgery vulnerability exists in Simple-Log v1.6, which is caused by Simple-Log not adequately verifying that requests come from trusted users. The vulnerability can be exploited to gain privileges and execute...

Simple-Log Cross-Site Request Forgery Vulnerability (CNVD-2021-40777)

Simple-Log is an open source free blog system based on PHP+MySQL. A cross-site request forgery vulnerability exists in Simple-Log v1.6, which is caused by Simple-Log not adequately verifying that requests come from trusted users. The vulnerability can be exploited to gain privileges and execute...

CVE-2020-18264

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=acteditmember"...

CVE-2020-18265

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=actaddmember"...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=acteditmember"...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=actaddmember"...

CVE-2020-18265

The CVE-2020-18265 entry concerns Simple-Log v1.6, where a Cross-Site Request Forgery (CSRF) vulnerability exists in the admin workflow. The reported issue states that CSRF can allow remote attackers to gain privileges and execute arbitrary code via the component Simple-Log/admin/admin.php?act=ac...

CVE-2020-18265

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=actaddmember"...

CVE-2020-18264

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=acteditmember"...

CVE-2020-18264

CVE-2020-18264 affects the open‑source blog system Simple-Log v1.6 . The issue is a Cross‑Site Request Forgery (CSRF) vulnerability that allows remote attackers to gain privileges and execute arbitrary code via the URL path Simple-Log/admin/admin.php?act=act_edit_member (and variants referenced i...

CVE-2020-18265: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=actaddmember"...

PT-2021-10166

Name of the Vulnerable Software and Affected Versions: Simple-Log version 1.6 Description: The issue allows remote attackers to gain privilege and execute arbitrary code. This is achieved through a Cross Site Request Forgery CSRF in the "Simple-Log/admin/admin.php?act=act add member" component...

CVE-2020-18264: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=acteditmember"...

PT-2021-10165

Name of the Vulnerable Software and Affected Versions: Simple-Log version 1.6 Description: The issue allows remote attackers to gain privilege and execute arbitrary code. This is achieved via the "Simple-Log/admin/admin.php?act=act edit member" API endpoint. Recommendations: For Simple-Log versio...

Simple-Log Cross-Site Request Forgery Vulnerability

Simple-Log is an open source free blog system based on PHP+MySQL. A cross-site request forgery vulnerability exists in Simple-Log v1.6, which is caused by Simple-Log not adequately verifying that requests come from trusted users. The vulnerability can be exploited to gain privileges and execute...

Simple-Log Cross-Site Request Forgery Vulnerability

Simple-Log is an open source free blog system based on PHP+MySQL. A cross-site request forgery vulnerability exists in Simple-Log v1.6, which is caused by Simple-Log not adequately verifying that requests come from trusted users. The vulnerability can be exploited to gain privileges and execute...