CVE-2022-23052

PeteReport Version 0.5 contains a Cross Site Request Forgery CSRF vulnerability allowing an attacker to trick users into deleting users, products, reports and findings on the application...

PT-2019-7679

Name of the Vulnerable Software and Affected Versions simple-add-pages-or-posts plugin versions prior to 1.7 Description The issue concerns a CSRF problem that allows for the deletion of users. Recommendations For versions prior to 1.7, update to version 1.7 or later to resolve the issue...

PT-2019-18653

Name of the Vulnerable Software and Affected Versions PbootCMS version 1.3.6 Description A CSRF issue was discovered that can lead to the deletion of users. This occurs via the "admin.php/User/del/ucode/" API endpoint. Recommendations For PbootCMS version 1.3.6, consider disabling access to the...

CVE-2018-15569

my little forum 2.4.12 allows CSRF for deletion of users...

CVE-2018-15569

my little forum 2.4.12 allows CSRF for deletion of users...

CVE-2012-2246

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php...