CVE-2019-25242

FaceSentry Access Control System 6.4.8 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to change administrator passwords, add new admin users, or open access control doors by...

CVE-2020-19268

A cross-site request forgery CSRF in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users...

PT-2021-10317

Name of the Vulnerable Software and Affected Versions: Dswjcms version 1.6.4 Description: A cross-site request forgery CSRF issue in the "index.php/Dswjcms/User/tfAdd" endpoint of Dswjcms allows authenticated attackers to arbitrarily add administrator users. Recommendations: For Dswjcms version...

CVE-2020-19268: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users...

CVE-2018-12603

Cross-site request forgery CSRF vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authentication of unspecified users for requests that add administrator users via the s parameter, a related issue to CVE-2018-12114...

PT-2018-11284

Name of the Vulnerable Software and Affected Versions LFCMS version 3.7.0 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of users for requests that add administrator users via the s parameter. Recommendations For LFCMS version...