CVE-2020-12257

rConfig 3.9.4 is vulnerable to cross-site request forgery CSRF because it lacks implementation of CSRF protection such as a CSRF token. An attacker can leverage this vulnerability by creating a form add a user, delete a user, or edit a user...

PT-2020-10359

Name of the Vulnerable Software and Affected Versions Advisto PEEL Shopping version 9.2.1 Description The issue allows for CSRF via the "administrer/utilisateurs.php" endpoint to delete a user. Recommendations For Advisto PEEL Shopping version 9.2.1, consider implementing proper CSRF protection...

CVE-2019-20178: Cross-Site Request Forgery (CSRF)

Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user...

dalbum 144 build 174 - Cross-Site Request Forgery

dalbum 144 build 174 - Cross-Site Request Forgery dalbum 144 build 174 and earlier CSRF Vulnerabilities =================================================================================== Exploit Title:dalbum 144174 and earlier CSRF Vulnerabilities Vendor: http://www.dalbum.org/ Download link...