Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2025/05/21 6:13 p.m.6 views

CVE-1999-0930

wwwboard allows a remote attacker to delete message board articles via a malformed argument...

5CVSS7AI score0.00485EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/13 5:15 a.m.0 views

CVE-2022-27174

Cross-site request forgery CSRF vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page...

4.3CVSS5.9AI score0.00151EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/06/13 5:15 a.m.0 views

CVE-2022-27174

Cross-site request forgery CSRF vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page...

4.3CVSS5.8AI score0.00151EPSS
Exploits0References2
OSV
OSV
added 2021/10/08 4:15 p.m.0 views

CVE-2021-41564

Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in...

6.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2021/10/08 4:15 p.m.8 views

CVE-2021-41564

Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in...

6.5CVSS0.00342EPSS
Exploits0References1
Prion
Prion
added 2021/10/08 4:15 p.m.9 views

Authorization

Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in...

5CVSS6.5AI score0.00342EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/08 3:15 p.m.8 views

CVE-2021-41564 Tad Honor - Improper Authorization

Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in...

5.3CVSS6.7AI score0.00342EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/05/17 12:0 a.m.1 views

Pluck 跨站请求伪造漏洞

Pluck is a content management system CMS developed using the PHP language. A cross-site request forgery vulnerability exists in Pluck CMS version 4.7.9. A remote attacker can exploit this vulnerability to execute arbitrary code and delete specific articles via the component "/admin.php?action=pag...

8.8CVSS5.9AI score0.00346EPSS
Exploits1References2
Prion
Prion
added 2019/02/23 7:29 p.m.11 views

Cross site request forgery (csrf)

An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete articles via a /admin.php?action=deletepage&var1= URI...

5.8CVSS6.5AI score0.00117EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2019/02/23 7:29 p.m.9 views

CVE-2019-9051

An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete articles via a /admin.php?action=deletepage&var1= URI...

6.5CVSS6.5AI score0.00117EPSS
Exploits1References1
OSV
OSV
added 2019/02/18 2:29 p.m.0 views

CVE-2019-8902

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI...

5.7CVSS5.8AI score0.0008EPSS
Exploits1References1
CNVD
CNVD
added 2018/06/20 12:0 a.m.1 views

AKCMS Cross-Site Request Forgery Vulnerability

AKCMS is a lightweight content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in AKCMS version 6.1. A remote attacker can exploit the vulnerability to delete articles...

6.5CVSS6.7AI score0.00117EPSS
Exploits1References1
Prion
Prion
added 2018/06/19 6:29 p.m.9 views

Cross site request forgery (csrf)

An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php...

5.8CVSS6.5AI score0.00117EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2018/05/08 12:0 a.m.1 views

Datenstrom Yellow Cross-Site Request Forgery Vulnerability

Datenstrom Yellow is a system for creating small websites, blogs and wikis. A cross-site request forgery vulnerability exists in the edit/ URI in Datenstrom Yellow version 0.7.3. A remote attacker could exploit this vulnerability to delete articles...

6.5CVSS6.9AI score0.00098EPSS
Exploits2References1
OSV
OSV
added 2018/04/20 5:29 p.m.11 views

CVE-2018-10248

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycledelete...

6.5CVSS6.7AI score
Exploits0References1
exploitpack
exploitpack
added 2012/02/26 12:0 a.m.12 views

ContaoCMS (aka TYPOlight) 2.11 - Cross-Site Request Forgery (Delete Admin Delete Article)

ContaoCMS aka TYPOlight 2.11 - Cross-Site Request Forgery Delete Admin Delete Article +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : ContaoCMS aka TYPOlight = 2.11 CSRF Delete Admin- Delete Article...

0.4AI score
Exploits0
exploitpack
exploitpack
added 2008/01/15 12:0 a.m.12 views

LulieBlog 1.0.1 - Remote Authentication Bypass

LulieBlog 1.0.1 - Remote Authentication Bypass -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- LulieBlog 1.0.1 delete id Remote Admin Bypass Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x contact: D.O.M TEAM 2008 we are: ka0x, an0de,...

0.9AI score
Exploits0
NVD
NVD
added 1998/09/03 4:0 a.m.9 views

CVE-1999-0930

wwwboard allows a remote attacker to delete message board articles via a malformed argument...

5CVSS0.00485EPSS
Exploits1References3
Rows per page
Query Builder