13319 matches found
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Wap Nepal Delete Post Revisions In WordPress allows Cross Site Request Forgery.This issue affects Delete Post Revisions In WordPress: from n/a through 4.6...
CVE-2023-48754
CVE-2023-48754: CSRF in the WordPress plugin Delete Post Revisions In WordPress (
CVE-2023-48754 WordPress Delete Post Revisions In WordPress Plugin <= 4.6 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Wap Nepal Delete Post Revisions In WordPress allows Cross Site Request Forgery.This issue affects Delete Post Revisions In WordPress: from n/a through 4.6...
CVE-2023-48913
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/archives/delete...
Cross site request forgery (csrf)
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/archives/delete...
WordPress Plugin Delete Post Revisions In WordPress Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Delete Post Revisions In...
Dreamer CMS 跨站请求伪造漏洞
Dreamer CMS is a dreamer content management system. A cross-site request forgery vulnerability exists in Dreamer CMS v4.1.3, which stems from the component /admin/archives/delete not adequately verifying whether a request comes from a trusted user, and can be exploited by an attacker to forge a...
Tyler Technologies Civil and Criminal Electronic Filing Authorization Issue Vulnerability
Tyler Technologies Civil and Criminal Electronic Filing is Tyler Technologies' electronic filing system for criminal and civil cases. A security vulnerability exists in Tyler Technologies Civil and Criminal Electronic Filing. A remote attacker could use this vulnerability to upload, delete, and...
CVE-2023-48913
Dreamer CMS v4.1.3 is vulnerable to Cross-Site Request Forgery via the /admin/archives/delete component. Root cause: insufficient verification of request origin for a sensitive operation. Impact includes high confidentiality, integrity, and availability risk (CVSSv3.1: 8.8, UI: REQUIRED, ATT&CK n...
League Table < 1.14 - Tables Cloning/Update/Deletion via CSRF
Description The plugin is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation in the view/tables.php file. This makes it possible for unauthenticated attackers to clone, edit, update, and delete tables via a forged request granted they can trick a site...
CVE-2023-5559
The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service...
CVE-2023-6311
A vulnerability was found in SourceCodester Loan Management System 1.0 and classified as critical. This issue affects the function deleteltype of the file deleteltype.php of the component Loan Type Page. The manipulation of the argument ltypeid leads to sql injection. The attack may be initiated...
PT-2023-32611 · Sourcecodester · Sourcecodester Loan Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System version 1.0 Description: A critical issue affects the function delete ltype of the file delete ltype.php in the Loan Type Page component. The manipulation of the ltype id argument leads to SQL injection...
PT-2023-32612 · Sourcecodester · Sourcecodester Loan Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System version 1.0 Description: A critical issue has been found in the Users Page component, specifically in the delete user function of the deleteUser.php file. The manipulation of the user id argument leads to...
PT-2023-32610 · Sourcecodester · Sourcecodester Loan Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System version 1.0 Description: A critical issue has been found in the system, affecting the delete borrower function of the deleteBorrower.php file. The manipulation of the borrower id argument leads to SQL...
SUSE SLES15: libnss_slurm2_23_02 / libpmi0_23_02 / libslurm39 / perl-slurm_23_02 / etc (SUSE-SU-2023:4564-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4564-1 advisory. - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entir...
CVE-2023-6276
A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/ct/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2023-6251
Cross-site Request Forgery CSRF in Checkmk 2.2.0p15, 2.1.0p37, = 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users...