52 matches found
CVE-2024-7065
The CVE-2024-7065 entry concerns Spina CMS up to version 2.18.0, where an unknown function in /admin/pages/ is vulnerable to cross-site request forgery. The issue can be triggered remotely, with exploits disclosed publicly. No specific exploit vectors, product versions beyond 2.18.0, or remediati...
Spina 跨站请求伪造漏洞
Spina is an easy-to-use CMS from SpinaCMS open source. A cross-site request forgery vulnerability exists in Spina version 2.18.0 and earlier versions. An attacker could exploit this vulnerability to perform a cross-site request forgery attack...
CVE-2024-41602
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL...
CVE-2024-41603
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the URI /admin/layout...
CVE-2024-41602
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL...
PT-2024-29459 · Spina Cms · Spina Cms
Name of the Vulnerable Software and Affected Versions: Spina CMS versions 2.18.0 and earlier Description: The issue allows a remote attacker to escalate privileges via a crafted URL. This is related to a Cross Site Request Forgery vulnerability. Recommendations: For Spina CMS versions 2.18.0 and...
CVE-2024-41603
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the URI /admin/layout...
PT-2024-29460 · Spina Cms · Spina Cms
Name of the Vulnerable Software and Affected Versions: Spina CMS version 2.18.0 Description: A Cross-Site Request Forgery CSRF issue was found in Spina CMS. The issue is related to the API endpoint "/admin/layout". Recommendations: For Spina CMS version 2.18.0, as a temporary workaround, consider...
CVE-2024-41603
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the URI /admin/layout...
CVE-2024-41602
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL...
CVE-2024-41602
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL...
CVE-2024-41603
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the URI /admin/layout...
CVE-2024-41602
CVE-2024-41602 describes a Cross Site Request Forgery vulnerability in Spina CMS, affecting version 2.18.0 and earlier. The issue allows a remote attacker to escalate privileges via a crafted URL (CSRF). The root cause is a CSRF-based flaw; explicit exploit details are not provided in the availab...
CVE-2024-41603
The CVE-2024-41603 entry applies to Spina CMS v2.18.0, where a Cross-Site Request Forgery (CSRF) vulnerability exists through the /admin/layout endpoint. The issue is described as a CSRF in the admin layout API, with CVSS v3.1 metrics: Network attack, low complexity, no privileges, user interacti...
GHSA-97WH-6HMJ-G8J9 Spina Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository spinacms/spina prior to 2.15.1...
CVE-2023-3445
Cross-site Scripting XSS - Stored in GitHub repository spinacms/spina prior to 2.15.1...
CVE-2023-3445 Cross-site Scripting (XSS) - Stored in spinacms/spina
Cross-site Scripting XSS - Stored in GitHub repository spinacms/spina prior to 2.15.1...
CVE-2023-3445 Cross-site Scripting (XSS) - Stored in spinacms/spina
Cross-site Scripting XSS - Stored in GitHub repository spinacms/spina prior to 2.15.1...
CVE-2023-3445
CVE-2023-3445 affects Spinacms/Spina CMS prior to version 2.15.1. The connected sources confirm a stored XSS vulnerability, located in the Spina admin flow (notably involving the title of pages) that can be triggered by submitting crafted input. If exploited, this could allow arbitrary script exe...