CVE-2018-20367: Improper Neutralization of Input During Web Page Generation

The "mall some commodity details: commodity consultation" component in WSTMart 2.0.8181212 has stored XSS via the consultContent parameter, as demonstrated by the index.php/home/goodsconsult/add.html URI...

CVE-2018-20015

YzmCMS 5.2 contains a CSRF vulnerability in admin/role/add.html. The CVE entry notes a CSRF weakness with a CVSSv3 base score of 8.8 (HIGH). Attack vector is NETWORK, with no privileges required, but user interaction is required, and impacts are HIGH for confidentiality, integrity, and availabili...

PT-2018-15237

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.2 Description The issue affects the admin/role/add.html endpoint, where a CSRF vulnerability is present. Recommendations For YzmCMS version 5.2, consider implementing CSRF protection measures, such as token-based validation, t...

CVE-2018-20015: Cross-Site Request Forgery (CSRF)

YzmCMS v5.2 has admin/role/add.html CSRF...

Cross site request forgery (csrf)

WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI...

CVE-2018-19138

WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI...

CVE-2018-19138

WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI...

PT-2018-14829

Name of the Vulnerable Software and Affected Versions WSTMart version 2.0.7 Description The issue is related to a CSRF problem. It affects the index.php/admin/staffs/add.html API endpoint. Recommendations For version 2.0.7, consider implementing proper CSRF protection mechanisms to prevent...

CVE-2018-19138: Cross-Site Request Forgery (CSRF)

WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI...

Cross site request forgery (csrf)

DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI...

PT-2018-14401

Name of the Vulnerable Software and Affected Versions DESHANG DSCMS version 1.1 Description The issue is related to a CSRF problem. It affects the "public/index.php/admin/admin/add.html" URI. Recommendations For DESHANG DSCMS version 1.1, consider implementing proper CSRF protection mechanisms to...

CVE-2018-18317: Cross-Site Request Forgery (CSRF)

DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI...

PT-2018-13858

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.1 Description The issue is related to stored XSS that exists via the title parameter in the admin/system manage/user config add.html page. Recommendations For YzmCMS version 5.1, update the software to a version that fixes thi...

CVE-2018-16449

CVE-2018-16449 affects OneThink 1.1.141212, enabling cross-site request forgery (CSRF) to perform admin actions: adding a page (admin.php?s=/Channel/add.html), adding a blog (admin.php?s=/Article/update.html), and changing audit state (admin.php?s=/Article/setStatus/status/1.html). The connected ...

PT-2018-13576

Name of the Vulnerable Software and Affected Versions OneThink version 1.1.141212 Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can be used to perform unauthorized actions on the application. Specifically, it affects the addition of pages via...

CVE-2018-15198: Cross-Site Request Forgery (CSRF)

An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/User/add.html that can add a user...

PT-2018-12942

Name of the Vulnerable Software and Affected Versions OneThink version 1.1 Description An issue was discovered that allows for a CSRF vulnerability. The vulnerability can be exploited through the "admin.php?s=/User/add.html" endpoint, which can add a user. Recommendations For OneThink version 1.1...

CVE-2018-14978: Cross-Site Request Forgery (CSRF)

An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI...

PT-2018-12855

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue exists where CSRF is possible via the "backend/user/admin/add.html" API endpoint. Recommendations For QCMS version 3.0.1, consider implementing proper CSRF protection mechanisms to prevent exploitation. ...

CVE-2018-11018: Cross-Site Request Forgery (CSRF)

An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery CSRF vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add administrator accounts via admin.php/role/add.html...