Cross site request forgery (csrf)

An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...

CVE-2019-9598: Cross-Site Request Forgery (CSRF)

An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...

PT-2019-19738

Name of the Vulnerable Software and Affected Versions Cscms version 4.1.0 Description An issue in Cscms allows for a CSRF vulnerability through the admin.php/pay endpoint, potentially enabling an attacker to change the payment account and redirect funds. Recommendations For Cscms version 4.1.0, a...