121 matches found
PT-2021-24304 · Unknown · Glfusion Cms
Name of the Vulnerable Software and Affected Versions: glFusion CMS version 1.7.9 Description: The issue concerns a reflected Cross Site Scripting XSS vulnerability. Specifically, the value of the title request parameter is copied into an HTML tag attribute encapsulated in double quotation marks...
GlFusion Cms Access Control Error Vulnerability
glFusion CMS is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an access control error, which can be exploited by attackers via /publichtml/comment.php...
GlFusion Cms Arbitrary User Registration Vulnerability
glFusion CMS is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to arbitrary user registration, which can be exploited by attackers to register using any user's email address...
glFusion CMS Licensing Issue Vulnerability
GlFusion Cms is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an authorization issue, which can be exploited by attackers via /publichtml/users.php...
CVE-2021-44942
glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery CSRF vulnerability in /publichtml/admin/plugins/badbehavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist...
CVE-2021-44942
glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery CSRF vulnerability in /publichtml/admin/plugins/badbehavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist...
Cross site request forgery (csrf)
glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery CSRF vulnerability in /publichtml/admin/plugins/badbehavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist...
CVE-2021-44942
glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery CSRF vulnerability in /publichtml/admin/plugins/badbehavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist...
CVE-2021-44942
CVE-2021-44942 affects glFusion CMS 1.7.9. The vulnerability is a Cross Site Request Forgery (CSRF) in /public_html/admin/plugins/bad_behavior2/blacklist.php that can be triggered to add entries to a blacklist when an administrator is prompted to click a link. The provided sources consistently de...
CVE-2021-44949
glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...
CVE-2021-44949
glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...
CVE-2021-44949
glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...
Improper access control
glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...
CVE-2021-44949
glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...
CVE-2021-44949
CVE-2021-44949 affects glFusion CMS 1.7.9, with an access control/authorization vulnerability exploitable via /public_html/users.php. Multiple sources (NVD, CNVD, CNNVD, OSV, CVE list, CNVD) describe it as an authorization issue; exploitation status is not provided in the documents. PT-2021-24185...
CVE-2021-44937
glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...
CVE-2021-44935
glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...
CVE-2021-44935
glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...
CVE-2021-44935
glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...
CVE-2021-44937
glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...