CVE-2021-44942

glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery CSRF vulnerability in /publichtml/admin/plugins/badbehavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist...

GlFusion Cms 跨站请求伪造漏洞

GlFusion Cms is a content management and publishing system. A security vulnerability exists in glFusion CMS v1.7.9 that allows attackers to conduct csrf attacks via /publichtml/admin/plugins/badbehavior2/blacklist.php...

GlFusion Cms 访问控制错误漏洞

glFusion CMS is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an access control error, which can be exploited by attackers via /publichtml/comment.php...