Cross site request forgery (csrf)

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

CVE-2020-29458

CVE-2020-29458 affects Textpattern CMS, specifically version 4.6.2, with a cross-site request forgery (CSRF) vulnerability in the prefs subsystem. The available connected sources confirm the affected product and that the root cause is CSRF via the prefs subsystem, with no detailed exploit vectors...

CVE-2020-29458

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

PT-2020-17169

Name of the Vulnerable Software and Affected Versions Textpattern CMS version 4.6.2 Description The issue allows for Cross-Site Request Forgery CSRF attacks via the prefs subsystem. This means an attacker could potentially trick a user into performing unintended actions on the system...

CVE-2020-29458: Cross-Site Request Forgery (CSRF)

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

TextPattern Cms Cross-Site Request Forgery Vulnerability

Textpattern CMS is a free open source content management system based on PHP and MySQL. A cross-site request forgery vulnerability exists in Textpattern CMS 4.6.2. An attacker can exploit this vulnerability to conduct cross-site request forgery attacks via the prefs subsystem...

TextPattern CMS 4.8.3 - Remote Code Execution (Authenticated)

!/usr/bin/python3 Exploit Title: TextPattern = 4.8.3 - Authenticated Remote Code Execution via Unrestricted File Upload Google Dork: N/A Date: 16/10/2020 Exploit Author: Michele '0blio' Cisternino Vendor Homepage: https://textpattern.com/ Software Link: https://github.com/textpattern/textpattern...

Textpattern CMS 4.6.2 - Cross-site Request Forgery

Exploit Title: Textpattern CMS 4.6.2 - Cross-site Request Forgery Exploit Author: Alperen Ergel Contact: @alprenae Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with Textpattern CMS" Date: 2020-10-29...

Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting

Exploit Title: Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting Exploit Author: Alperen Ergel Web Site: https://alperenae.gitbook.io/ Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with...

Textpattern CMS 4.6.2 Cross Site Scripting

Exploit Title: Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting Exploit Author: Alperen Ergel Web Site: https://alperenae.gitbook.io/ Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with...

CVE-2015-8033

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...

CVE-2015-8032

In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...

Design/Logic Flaw

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...

Design/Logic Flaw

In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...

CVE-2015-8033

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...

CVE-2015-8033

The CVE-2015-8033 entry concerns Textpattern 4.5.7, where the password-reset feature does not securely tether a password hash to a user account. The NVD data lists CVSS v3.1 base metrics: 5.3 (Medium) with Network attack vector, Low attack complexity, no privileges required, no user interaction, ...

CVE-2015-8033

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...

CVE-2015-8032

In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...

CVE-2015-8032

In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...

CVE-2015-8032

CVE-2015-8032 affects Textpattern 4.5.7. The vulnerability allows an unprivileged author to change an article's markup setting, indicating a permission/ownership flaw in how article markup is managed. The provided sources do not specify an exploit method or a patch/mitigation. The impact is limit...