Lucene search
+L

9 matches found

CNNVD
CNNVD
•added 2024/11/08 12:00 a.m.•18 views

dingfanzu 安全漏洞

dingfanzu is a php based takeaway ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu version V1.0, which originates from the /admin/doAdminAction.php?act=addAdmin component that contains a cross-site request forgery vulnerability...

9.3CVSS6.7AI score0.00257EPSS
SaveExploits1References1
Mend
Mend
•added 2024/11/08 12:00 a.m.•1 views

CVE-2024-50966

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addAdmin...

9.3CVSS0.00257EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•1 views

CVE-2024-50966: Cross-Site Request Forgery (CSRF)

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addAdmin...

9.3CVSS5.7AI score0.00257EPSS
SaveExploits1References1
Prion
Prion
•added 2020/01/31 10:15 p.m.•14 views

Cross site request forgery (csrf)

School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=addadmin CSRF to add an administrative user...

4.3CVSS6.5AI score0.01102EPSS
SaveExploits3References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/01/31 12:00 a.m.•3 views

PT-2020-20181

Name of the Vulnerable Software and Affected Versions School Management Software PHP/mySQL through 2019-03-14 Description The issue allows an attacker to add an administrative user via a CSRF attack on the office admin/?action=addadmin endpoint. Recommendations For School Management Software...

6.5CVSS0.01102EPSS
SaveExploits3References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/31 12:00 a.m.•5 views

CVE-2020-8504: Cross-Site Request Forgery (CSRF)

School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=addadmin CSRF to add an administrative user...

6.5CVSS6.7AI score0.01102EPSS
SaveExploits3References2
exploitpack
exploitpack
•added 2009/12/14 12:00 a.m.•16 views

AdManagerPro - Cross-Site Request Forgery (Add Admin)

AdManagerPro - Cross-Site Request Forgery Add Admin /\ == \ /\ \ /\ \ \ \ input type="...

1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/05/26 12:00 a.m.•17 views

ZeeCareers 2.0 - addAdminmembercode.php Arbitrary Add Admin

ZeeCareers 2.0 - addAdminmembercode.php Arbitrary Add Admin ZeeCareers v2.0 addadminmembercode.php Add Admin function validateform ifform.name.value == "" || !isNaNform.username.value alert"Please enter your name correctly."; form.username.focus; return false; ifform.name.value == "" ||...

0.1AI score
SaveExploits0
zdt
zdt
•added 2006/03/09 12:00 a.m.•72 views

JiRos Banner Experience 1.0 (Create Admin Bypass) Remote Exploit

Exploit for unknown platform in category web applications ================================================================ JiRos Banner Experience 1.0 Create Admin Bypass Remote Exploit ================================================================ Jiros Banner Experience Pro Unauthorized Admin...

7.1AI score
SaveExploits0
Rows per page
Query Builder