3 matches found
CVE-2020-19159
Cross Site Request Forgery CSRF in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member=add'...
8.8CVSS8.2AI score0.00998EPSS
SaveExploits1
CVE-2020-19159
Cross Site Request Forgery CSRF in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member&action=add'...
8.8CVSS6.1AI score0.00998EPSS
SaveExploits1References1
CVE-2020-19159
LaikeTui v3 is affected by a CSRF vulnerability that allows remote attackers to execute arbitrary code via the component /index.php?module=member&action=add. Multiple sources (PT-Security PT-2021-10299, NVD CVE-2020-19159, CNNVD) confirm CSRF as the root cause; exploitation details are not provid...
8.8CVSS9.1AI score0.00998EPSS
SaveExploits1References1Affected Software1
20