4232 matches found
PT-2018-13583
Name of the Vulnerable Software and Affected Versions baigo CMS version 2.1.1 Description An issue in baigo CMS allows a CSRF attack via the index.php?m=article&c=request endpoint, potentially causing the publication of any article. Recommendations For baigo CMS version 2.1.1, consider disabling...
PT-2018-13576
Name of the Vulnerable Software and Affected Versions OneThink version 1.1.141212 Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can be used to perform unauthorized actions on the application. Specifically, it affects the addition of pages via...
iCMS Cross-Site Request Forgery Vulnerability
iCMS is a content management system CMS built with PHP and MySQL databases. A cross-site request forgery vulnerability exists in iCMS version 7.0.9, which can be exploited by remote attackers with the help of the admincp.php?app=article&do=update page to make administrators review and approve any...
CVE-2018-16332
CVE-2018-16332 affects iCMS 7.0.9 with a CSRF vulnerability in admincp.php?app=article&do=update. Connected sources describe an attack enabling remote exploitation to coerce administrators to review/approve articles; CVSS3 base score 8.8 (HIGH) with network attack vector, user interaction require...
CVE-2018-16332
An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability...
CVE-2018-16332
An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability...
PT-2018-13495
Name of the Vulnerable Software and Affected Versions iCMS version 7.0.9 Description An issue was discovered in the software, which is related to a CSRF vulnerability in the admincp.php endpoint, specifically when app=article and do=update. Recommendations For iCMS version 7.0.9, consider...
CVE-2018-16332: Cross-Site Request Forgery (CSRF)
An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability...
CVE-2018-15566
tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...
PT-2018-13091
Name of the Vulnerable Software and Affected Versions tp5cms versions prior to 2017-05-25 Description The issue allows for XSS via the q parameter in the "admin.php/article/index.html" API endpoint. Recommendations For versions prior to 2017-05-25, avoid using the q parameter in the...
CVE-2018-15566: Improper Neutralization of Input During Web Page Generation
tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...
2018-08 Security Update for Adobe Flash Player for Windows 8.1 for x86-based Systems (KB4343902)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Security Update for Adobe Flash Player for Windows 10 Version 1507 for x86-based Systems (KB4343902)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x86-based Systems (KB4343902)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Security Update for Adobe Flash Player for Windows 10 Version 1803 for x86-based Systems (KB4343902)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4343887)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Security Update for Adobe Flash Player for Windows 10 Version 1607 for x86-based Systems (KB4343902)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4343897)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...