44 matches found
CVE-2018-10248
An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content=content=recycledelete...
CVE-2020-10488
CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request...
CVE-2020-10485
CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request...
CVE-2026-21429 Emlog has Broken Access Control (BAC)
Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after publishing them. As of time of publication, no known patched versions are available...
EUVD-1999-0911
Malware in sbrugna...
EUVD-2019-17267
Malware in sbrugna...
EUVD-2018-2828
Malware in sbrugna...
EUVD-2020-2938
Malware in sbrugna...
EUVD-2020-10122
Malware in sbrugna...
EUVD-2019-18974
Malware in sbrugna...
EUVD-2019-18291
Malware in sbrugna...
EUVD-2019-18437
Malware in sbrugna...
EUVD-2018-4542
Malware in sbrugna...
EUVD-2020-2941
Malware in sbrugna...
EUVD-2018-2322
Malware in sbrugna...
EUVD-2025-14828
Malicious code in bioql PyPI...
EUVD-2021-28580
Malicious code in bioql PyPI...
CVE-2025-54541
QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request deleting an article. The vendor was notified early about this vulnerability, but didn't respon...
CVE-2025-54541 Cross-Site Request Forgery in QuickCMS
QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request deleting an article. The vendor was notified early about this vulnerability, but didn't respon...
CVE-2020-18195
Cross Site Request Forgery CSRF in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete a specific article via the component " /admin.php?action=page."...