PT-2018-13090

Name of the Vulnerable Software and Affected Versions daveismyname simple-cms through 2014-03-11 Description The issue allows for adding a page without requiring authentication, which can be exploited via CSRF. This is due to a lack of authentication requirement in the "admin/addpage.php" endpoin...

CVE-2018-15565: Cross-Site Request Forgery (CSRF)

An issue was discovered in daveismyname simple-cms through 2014-03-11. admin/addpage.php does not require authentication for adding a page. This can also be exploited via CSRF...

CVE-2008-3292

constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php...

Authentication flaw

constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php...

CVE-2008-3292

constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php...

CVE-2008-3292: Improper Authentication

constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php...