CVE-2024-48291

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/doAdminAction.php?act=editAdmin&id=17...

CVE-2024-48191

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=delAdmin&id=17...

PT-2022-24370

Name of the Vulnerable Software and Affected Versions Shopxian CMS version 3.0.0 Description A CSRF issue allows deletion of a specified column via the "index.php/contents-admin cat-finderdel-model-ContentsCat.html" endpoint, specifically when the id parameter is set to 17. Recommendations For...