PT-2023-11497 · Unknown · Catfish Cms

Name of the Vulnerable Software and Affected Versions: CatfishCMS version 4.8.63 Description: A Cross Site Request Forgery CSRF issue was found that could allow attackers to gain administrator permissions. The issue is related to the "/index.php/admin/index/modifymanage.html" API endpoint...

CatfishCMS suffers from a logic flaw vulnerability (CNVD-2020-73469)

CatfishCMS is a PHP content management system does not require a high depth of expertise easy to build the site using simple to adapt to different needs. CatfishCMS has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...