CVE-2025-50364_CSRF_ADD_CATEGORY-phpgurukul-CVE

项目名称和仓库 URL： 使用 PHP 和 MySQL 的 Maid Hiring Management System 漏洞类型： 客户端请求伪造 受影响版本： v1.0 💣漏洞描述： PHPGurukul Hiring Management System 的管理面板存在跨站请求伪造（CSRF）漏洞，攻击者可以通过诱骗已认证的管理员访问恶意站点来添加任意招聘类别。这可能导致数据污染和未经授权的管理员级更改。 👩‍💻影响： 未经授权的类别创建 🛜概念验证（PoC） 1. 存在一个类别添加功能，仅允许已认证的管理员添加类别。 2. 用于向端点 /admin/add-category.php 发送...

Bludit-3.9.2-Auth-Bruteforce-Bypass-CVE-2019-17240

Script de Bypass de Mitigación de Fuerza Bruta para Bludit Resumen Este script es una implementación en Bash revisada de un exploit dirigido a Bludit CMS versión = 3.9.2. Aprovecha una vulnerabilidad CVE-2019-17240 que permite forzar contraseñas por fuerza bruta evadiendo la protección basada en...

CVE-2022-47132

CVE-2022-47132 Academy LMS history.pushState'', '', '/' input type="submit" value="...

CVE-2018-8718

Exploit Title : Jenkins mailer plugin CSRF Vulnerability - Send CSRF MAIL Date : 2018/06/05 Exploit Author : Yeom Geun Cheol Vendor Homepage : https://jenkins.io/ Software Link : https://updates.jenkins.io/download/plugins/mailer/1.20/mailer.hpi Version: Below Version 1.20 1.1 1.20 Tested on :...

CVE-2023-40869

CVE-2023-40869 Vulnerabilidad de Cross Site Scripting en mooSocial Software v.3.1.6 y 3.1.7 permite a un atacante remoto ejecutar código arbitrario a través de un script manipulado en las funciones editmenu, copuon y groupcategorias XSS almacenado vía CSRF. Rutas Afectadas...

CVE-2021-24884

CVE-2021-24884 Formidable 4.09.04中的XSS2RCE Formidable 4.09.04...

CVE-2025-68722

CVE-2025-68722: Axigen WebAdmin CSRF Resumen de la vulnerabilidad Acciones críticas que cambian el estado en la interfaz Axigen WebAdmin son accesibles mediante solicitudes GET. Si bien el token h protege contra el CSRF directo, la aplicación procesa solicitudes en cola a través del parámetro s...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" Cómo usar Estoy usando Python3.9. pip install requests urllib3 faker ! Problema Actualmente hay algunos problemas: 1. Si no se utiliza el prox...

CVE-2019-6249_Hucart-cms

CVE-2019-6249Hucart cms 一、漏洞摘要 漏洞名称: Hucart cms v5.7.4 CSRF漏洞可任意增加管理员账号 上报日期: 2019-01-13 漏洞发现者: AllenChen（[email protected]） 产品首页: http://www.hucart.com/ 软件链接: http://www.hucart.com/ 版本: v5.7.4 CVE编号: CVE-2019-6249\ 二、漏洞概述 Hucart cms v5.7.4版本存在一个CSRF漏洞，当管理员登陆后访问下面CSRF测试页面可增加一个名为hack的管理员账号。...

CVE-2011-2461_Magento_Patch

CVE-2011-2461MagentoPatch By Edmonds Commerce This CVE relates to a CSRF vulnerability in the Adobe Flex .swf files used by Magento. You can find more information regarding the CVE here: Peter O'Callaghan - Magento CSRF vulnerability via Adobe Flex Minded Security - The old is new, again...

CVE-2026-100748

Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension 6.5.0...

CVE-2026-100749

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days will be deleted...

CVE-2026-100747

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name...

CVE-2026-100748 Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0

Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension 6.5.0...

CVE-2026-100748

The Event Gallery extension for Joomla (by svenbluege.de ) is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in various cart actions. This issue affects versions less than 6.5.0 . While the specific root cause and remediation steps are not detailed in the provided documents, the vulnerabi...

EUVD-2026-87932

Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension 6.5.0...

CVE-2026-100747 Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name...

CVE-2026-100747

The Joomla Extension - svenbluege.de - Event Gallery extension (versions

EUVD-2026-87930

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name...

CVE-2026-100749 Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days will be deleted...