PT-2018-9807

Name of the Vulnerable Software and Affected Versions: Discuz! versions prior to X3.4 Description: The issue is related to stored XSS via the "portal.php?mod=portalcp&ac=article" API endpoint, specifically due to mishandling of IMG elements associated with remote images. Recommendations: For...

CVE-2018-10297: Improper Neutralization of Input During Web Page Generation

Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images...

CVE-2018-10248

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycledelete...

CVE-2018-10248

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycledelete...

CVE-2018-10248

WUZHI CMS 4.1.0 is affected by a CSRF vulnerability that allows deleting any article via the endpoint index.php?m=content&f=content&v=recycle_delete. The issue is described across multiple sources (NVD entry, Red Hat advisory, CNVD/CVELIST, and others) as a CSRF that can delete articles, with the...

CVE-2018-10248: Cross-Site Request Forgery (CSRF)

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycledelete...

PT-2018-9781 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A CSRF issue allows deletion of any article via the "index.php?m=content&f=content&v=recycle delete" endpoint. Recommendations: For WUZHI CMS version 4.1.0, update to a newer version that contains a fix fo...

CVE-2018-10222

An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=articlecategory&do=save&frame=iPHP...

PT-2018-9764

Name of the Vulnerable Software and Affected Versions: idreamsoft iCMS version 7.0 Description: A CSRF issue was found that can be exploited to add a Column via the "/admincp.php?app=article category&do=save&frame=iPHP" API endpoint. Recommendations: For idreamsoft iCMS version 7.0, as a temporar...

2018-04 Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB4093109)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-04 Security Update for Adobe Flash Player for Windows Server 2016 for x64-based Systems (KB4093110)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-04 Security Update for Adobe Flash Player for Windows 8.1 for x86-based Systems (KB4093110)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-04 Security Update for Adobe Flash Player for Windows Embedded 8 Standard for x86-based Systems (KB4093110)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-04 Security Update for Adobe Flash Player for Windows 10 Version 1511 for x64-based Systems (KB4093110)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-04 Security Update for Adobe Flash Player for Windows 10 Version 1511 for x86-based Systems (KB4093110)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-04 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4093119)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

CVE-2018-9923

An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request...

Cross site request forgery (csrf)

An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request...

CVE-2018-9923

An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request...

idreamsoft iCMS Cross-Site Request Forgery Vulnerability

idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in the admincp.php file in idreamsoft iCMS 7.0.7 and earlier versions. A remote attacker can exploit this vulnerability by sending an...