CVE-2018-25334

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

Elevation of Privilege Vulnerability in CMS Made Simple

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engines. An elevation of privilege vulnerability exists in CMS Made Simple. An attacker can exploit the vulnerability to bypass anti-forgery checks on data and gain access to backend...

CVE-2015-8814

Umbraco before 7.4.0 allows remote attackers to bypass anti-forgery security measures and conduct cross-site request forgery CSRF attacks as demonstrated by editing user account information in the templates.asmx.cs file...

PT-2017-7479

Name of the Vulnerable Software and Affected Versions Umbraco versions prior to 7.4.0 Description The issue allows remote attackers to bypass anti-forgery security measures and conduct cross-site request forgery CSRF attacks. This can be demonstrated by editing user account information in the...