6 matches found
CVE-2018-11405
Kliqqi 2.0.2 has CSRF in admin/adminusers.php...
CVE-2018-11405: Cross-Site Request Forgery (CSRF)
Kliqqi 2.0.2 has CSRF in admin/adminusers.php...
CVE-2015-6655
Cross-site request forgery CSRF vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/adminusers.php...
CVE-2015-6655: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/adminusers.php...
CVE-2012-2937: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the 1 list parameter in a move action to admin/adminindex.php, 2 display parameter in a minimize action to admin/adminindex.php, 3 enabled parameter to admin/adminusers.ph...
CVE-2006-0438: Undefined Security Weakness
Cross-site request forgery CSRF vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode IMG are enabled, allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag in a user profile, as demonstrated using links to 1 admin/adminusers.php and 2...