Lucene search
+L

3 matches found

CNVD
CNVD
•added 2018/08/21 12:00 a.m.•16 views

daveismyname simple-cms cross-site request forgery vulnerability

daveismyname simple-cms is a content management system CMS. A cross-site request forgery vulnerability exists in daveismyname simple-cms version 2014-03-11 and earlier. A remote attacker can exploit this vulnerability to delete arbitrary pages with the help of the admin/?delpage=8 URL...

8.8CVSS8.9AI score0.00465EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/20 12:00 a.m.•7 views

CVE-2018-15564: Cross-Site Request Forgery (CSRF)

An issue was discovered in daveismyname simple-cms through 2014-03-11. There is a CSRF vulnerability that can delete any page via admin/?delpage=8...

8.8CVSS7.8AI score0.00465EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/08/20 12:00 a.m.•6 views

PT-2018-13089

Name of the Vulnerable Software and Affected Versions daveismyname simple-cms versions through 2014-03-11 Description The issue is related to a CSRF vulnerability. This vulnerability can be exploited to delete any page via the "admin/?delpage=8" endpoint, using the delpage variable. Recommendatio...

8.8CVSS0.00465EPSS
SaveExploits0References3
Rows per page
Query Builder