12 matches found
EUVD-2008-7139
Malware in sbrugna...
EUVD-2022-3070
Malicious code in bioql PyPI...
EUVD-2022-25477
Malicious code in bioql PyPI...
CVE-2024-3163: Cross-Site Request Forgery (CSRF)
The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack...
WordPress plugin Easy Property Listings 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Google Android 权限许可和访问控制问题漏洞
Google Android is a Linux-based open-source operating system from the U.S. company Google Google. Google Android has a security vulnerability that could be exploited by attackers to delete Fdn contacts...
Mautic Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that 1 delete email campaigns or 2 delete contacts...
CVE-2017-8874
Multiple cross-site request forgery CSRF vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that 1 delete email campaigns or 2 delete contacts...
PT-2017-18596
Name of the Vulnerable Software and Affected Versions Mautic version 1.4.1 Description The issue allows remote attackers to hijack the authentication of users for requests that delete email campaigns or delete contacts due to multiple cross-site request forgery CSRF vulnerabilities. Recommendatio...
CVE-2017-8874: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that 1 delete email campaigns or 2 delete contacts...
CVE-2008-7180
delquery1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request with a modified id variable...
CVE-2008-7180: Improper Input Validation
delquery1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request with a modified id variable...