Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in M&S Consulting Email Before Download.This issue affects Email Before Download: from n/a through 6.9.7...

CVE-2024-23519

CVE-2024-23519 is a CSRF vulnerability in the WordPress plugin Email Before Download (M&S Consulting) affecting versions up to 6.9.7. The NVD/patch sources indicate a high-impact issue (CVSS v3.1 base score 8.8; network attack vector, no privileges required, user interaction required) that could ...

CVE-2024-23519 WordPress Email Before Download Plugin <= 6.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in M&S Consulting Email Before Download.This issue affects Email Before Download: from n/a through 6.9.7...

CVE-2024-23519: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in M&S Consulting Email Before Download.This issue affects Email Before Download: from n/a through 6.9.7...

PT-2024-19920 · Unknown · M&S Consulting Email Before Download

Name of the Vulnerable Software and Affected Versions: M&S Consulting Email Before Download versions n/a through 6.9.7 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a w...

concordconsulting.net Improper Access Control vulnerability OBB-3857935

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

blanchier-consulting.fr Improper Access Control vulnerability OBB-3824221

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gladiusconsulting.es Improper Access Control vulnerability OBB-3822177

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

adrex.consulting Improper Access Control vulnerability OBB-3814634

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

altaitconsulting.com Improper Access Control vulnerability OBB-3791717

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

File Upload Vulnerability in Yonghong BI of Beijing Yonghong Business Intelligence Technology Co.

Beijing Yonghong Business Intelligence Technology Co., Ltd. is committed to providing global enterprises with big data technology products and services, relying on independent intellectual property rights of the one-stop big data platform to form a perfect product and service system, with...

solvuconsulting.com.au Improper Access Control vulnerability OBB-3782874

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Command Execution Vulnerability in Green Alliance Operations and Maintenance Security Management System

Beijing Shenzhou Green Alliance Technology Co., Ltd. is a company whose business scope includes technology development, technology consulting, technology services; computer system services and so on. A command execution vulnerability exists in the Green Alliance Operations and Maintenance Securit...

CVE-2023-47230

Cross-Site Request Forgery CSRF vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.6.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.6.0 versions...

CVE-2023-47230

CVE-2023-47230 concerns the WordPress plugin “WordPress Contact Forms by Cimatti” (Cimatti Consulting) up to version ≤ 1.6.0. The connected documents confirm a Cross-Site Request Forgery (CSRF) vulnerability due to missing CSRF protections in the plugin, enabling potential unauthorized actions to...

PT-2023-30377

Name of the Vulnerable Software and Affected Versions Cimatti Consulting WordPress Contact Forms by Cimatti plugin versions = 1.6.0 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended...

CVE-2023-47230: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.6.0 versions...

boudreauconsulting.com Cross Site Scripting vulnerability OBB-3711301

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eemanconsulting.be Cross Site Scripting vulnerability OBB-3705061

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...