CVE-2023-6676: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery. This issue affects CyberMath: from v1.4 before v1.5...

CVE-2023-6675: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server. This issue affects CyberMath: from v.1.4 before v.1.5...

PT-2024-15045 · Cybermath · Cybermath

Name of the Vulnerable Software and Affected Versions: CyberMath versions 1.4 through 1.4 Description: A Cross-Site Request Forgery CSRF issue affects CyberMath, allowing unauthorized actions to be performed on behalf of a user. This issue can be exploited by tricking a user into performing an...

PT-2024-15042

Name of the Vulnerable Software and Affected Versions CyberMath versions 1.4 through 1.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This affects the CyberMath software. Recommendations F...

National Keep CyberMath Cross-Site Scripting Vulnerability

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A cross-site scripting vulnerability exists in National Keep CyberMath versions v1.4 through v1.5 that stems from improper input neutralization during web page generation, resulting in a reflected...