PT-2018-13874

Name of the Vulnerable Software and Affected Versions UNL-CMS version 7.59 Description An issue was discovered that allows a CSRF attack to create new content. The attack can be performed via the API endpoint "/node/add/article" with specific parameters, including "render=overlay". Recommendation...

2018-09 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x86-based Systems (KB4457146)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-09 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x64-based Systems (KB4457146)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-09 Security Update for Adobe Flash Player for Windows 10 Version 1709 for ARM64-based Systems (KB4457146)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-09 Security Update for Adobe Flash Player for Windows 10 Version 1507 for x64-based Systems (KB4457146)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-09 Security Update for Adobe Flash Player for Windows Embedded 8 Standard for x86-based Systems (KB4457146)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-09 Security Update for Adobe Flash Player for Windows 10 Version 1803 for x86-based Systems (KB4457146)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-09 Security Update for Adobe Flash Player for Windows 10 Version 1803 for x64-based Systems (KB4457146)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-09 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4457142)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-09 Cumulative Update for Windows Server 2016 (1709) for x64-based Systems (KB4457142)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-09 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4457131)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

SQL injection vulnerability in the article submission interface of S-CMS school website builder system

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A SQL injection vulnerability exists in the article submission interface of S-CMS School Building System. An attacker can exploit the...

2018-08 Security Update for Adobe Flash Player for Windows 10 Version 1809 for x86-based Systems (KB4460093)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

baigo CMS Cross-Site Request Forgery Vulnerability

baigo CMS is an open source PHP-based content management system CMS. A cross-site request forgery vulnerability exists in the index.php?m=article&c=request page in baigo CMS version 2.1.1, which can be exploited by remote attackers to publish arbitrary articles...

CVE-2018-16458

An issue was discovered in baigo CMS v2.1.1. There is an index.php?m=article&c=request CSRF that can cause publication of any article...

Cross site request forgery (csrf)

An issue was discovered in baigo CMS v2.1.1. There is an index.php?m=article&c=request CSRF that can cause publication of any article...

CVE-2018-16458

Baigo CMS v2.1.1 is affected by a Cross-Site Request Forgery in the index.php?m=article&c=request endpoint, enabling publication of arbitrary articles. The issue is described consistently across multiple sources (NVD/CNVD/PRION/CVEs) as a CSRF in baigo CMS 2.1.1 that can cause published content w...

CVE-2018-16458

An issue was discovered in baigo CMS v2.1.1. There is an index.php?m=article&c=request CSRF that can cause publication of any article...

CVE-2018-16449

CVE-2018-16449 affects OneThink 1.1.141212, enabling cross-site request forgery (CSRF) to perform admin actions: adding a page (admin.php?s=/Channel/add.html), adding a blog (admin.php?s=/Article/update.html), and changing audit state (admin.php?s=/Article/setStatus/status/1.html). The connected ...

CVE-2018-16458: Cross-Site Request Forgery (CSRF)

An issue was discovered in baigo CMS v2.1.1. There is an index.php?m=article&c=request CSRF that can cause publication of any article...