237 matches found
Cross site request forgery (csrf)
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...
CVE-2024-25419
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...
flusity CMS Cross-Site Request Forgery Vulnerability
flusity CMS is a user interaction interface solution where code can be easily changed or added. A cross-site request forgery vulnerability exists in flusity CMS version v2.33, which stems from a cross-site request forgery CSRF vulnerability in component /core/tools/deletemenu.php...
CVE-2024-25418
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...
CVE-2024-25419
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...
CVE-2024-25418
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...
CVE-2024-25417
CVE-2024-25417 concerns flusity-CMS v2.33, where a CSRF flaw exists in the /core/tools/add_translation.php component. The vulnerability allows unauthorized actions requiring user interaction, with CVSS v3.1 base score 8.8 (High impact across confidentiality, integrity, and availability; network a...
CVE-2024-25418
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...
flusity CMS Cross-Site Request Forgery Vulnerability
flusity CMS is a user interaction interface solution where code can be easily changed or added. A cross-site request forgery vulnerability exists in flusity CMS version v2.33, which stems from a cross-site request forgery CSRF vulnerability in component /core/tools/updatemenu.php...
flusity CMS Cross-Site Request Forgery Vulnerability
flusity CMS is a user interaction interface solution where code can be easily changed or added. A cross-site request forgery vulnerability exists in flusity CMS version v2.33, which stems from a cross-site request forgery CSRF vulnerability in component /core/tools/addtranslation.php...
CVE-2024-25417
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...
CVE-2024-25417
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...
CVE-2024-25419
CVE-2024-25419 affects flusity-CMS v2.33 via a Cross-Site Request Forgery (CSRF) in the component /core/tools/update_menu.php. The CVSS 3.1 vectors from the sources indicate a high-severity, high-impact issue (C/H, I/H, A/H) with network attack vector, no privileges required, user interaction req...
CVE-2024-25417
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...
CVE-2024-25418
Summary: CVE-2024-25418 affects flusity-CMS v2.33, with a CSRF vulnerability in the /core/tools/delete_menu.php component. Root cause is CSRF in that endpoint, leading to potential unauthorized actions without user consent. The CVSS v3.1 metrics indicate a High severity (8.8) with network attack ...
CVE-2024-25419
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...
CVE-2024-24469
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the deletepost .php...
CVE-2024-24468
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the addcustomblock.php...