CVE-2016-20051: Cross-Site Request Forgery (CSRF)

Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms. Attackers can trick authenticated administrators into visiting a page containing a hidden form that submits POST...

PT-2026-30349

Name of the Vulnerable Software and Affected Versions Snews CMS version 1.7 Description Cross-site request forgery occurs when an attacker tricks an authenticated user into performing an action they did not intend to. This issue allows attackers to change administrator credentials without...