PT-2019-14497

Name of the Vulnerable Software and Affected Versions Sentrifugo version 3.2 Description The issue lacks CSRF protection, which could allow an attacker to trick the administrator into executing arbitrary code. This can be achieved by accessing the "index.php/dashboard/viewprofile" API endpoint vi...

CVE-2019-16059: Cross-Site Request Forgery (CSRF)

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...