6 matches found
EUVD-2021-11261
Malware in sbrugna...
Cross site request forgery (csrf)
The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the delete functionality. This makes it possible for unauthenticated attackers to delete image...
PT-2023-32157
Name of the Vulnerable Software and Affected Versions Thumbnail Slider With Lightbox plugin for WordPress versions up to and including 1.0 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the delete functionality. This allows...
PT-2023-19033 · Milesight · Milesight Ur32L
Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: An OS command injection issue exists in the ys thirdparty user delete functionality. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests t...
Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
Description cross site request forgery vulnerability is present in delete functionality of doctor feature. Proof of Concept history.pushState'', '', '/' document.forms0.submit; Impact This vulnerability is capable of delete the existing logs...
