Lucene search
+L

7 matches found

osv-ghsa
osv-ghsa
•added 2023/12/05 3:30 p.m.•29 views

GHSA-R7W2-J96V-VW8M Cross-Site Request Forgery in JFinalCMS via /admin/slide/update

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/update...

8.8CVSS5.9AI score0.00391EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/12/05 3:15 p.m.•10 views

CVE-2023-49374

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/update...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/05 12:00 a.m.•3 views

PT-2023-31188

Name of the Vulnerable Software and Affected Versions JFinalCMS version 5.0.0 Description A Cross-Site Request Forgery CSRF issue was found in JFinalCMS via the "/admin/slide/update" API endpoint. This allows an attacker to perform unauthorized actions on the system. Recommendations For JFinalCMS...

8.8CVSS5.6AI score0.00391EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2023/12/05 12:00 a.m.•50 views

CVE-2023-49374

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/update...

9.1AI score0.00391EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•5 views

CVE-2023-49374: Cross-Site Request Forgery (CSRF)

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/update...

8.8CVSS7.8AI score0.00391EPSS
SaveExploits1References2
Mend
Mend
•added 2023/12/05 12:00 a.m.•4 views

CVE-2023-49374

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/update...

8.8CVSS0.00391EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/12/05 12:00 a.m.•18 views

JFinalCMS Security Vulnerability

JFinalCMS is a content management system by heyewei individual developer. A security vulnerability exists in JFinalCMS v5.0.0, which originates from a cross-site request forgery vulnerability in the /admin/slide/update component...

8.8CVSS8.5AI score0.00391EPSS
SaveExploits1References1
Rows per page
Query Builder