CVE-2023-49446

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/save...

CVE-2023-49375

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/friendlink/update...

CVE-2023-49374

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/update...

CVE-2023-49380

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/friendlink/delete...

CVE-2023-49377

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/update...

CVE-2023-49382

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/div/delete...

CVE-2023-49398

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/delete...

CVE-2023-49381

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/div/update...

CVE-2023-49383

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/save...

CVE-2023-49448

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/nav/delete...

PT-2023-31231

Name of the Vulnerable Software and Affected Versions JFinalCMS version 5.0.0 Description A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS. The vulnerability can be exploited via the "/admin/nav/update" API endpoint. Recommendations For JFinalCMS version 5.0.0, update to a...

PT-2023-31188

Name of the Vulnerable Software and Affected Versions JFinalCMS version 5.0.0 Description A Cross-Site Request Forgery CSRF issue was found in JFinalCMS via the "/admin/slide/update" API endpoint. This allows an attacker to perform unauthorized actions on the system. Recommendations For JFinalCMS...

PT-2023-31232

Name of the Vulnerable Software and Affected Versions JFinalCMS version 5.0.0 Description The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "admin/nav/delete" endpoint. Recommendations For JFinalCMS version 5.0.0, as a temporary workaround, consider...

CVE-2023-49447: Cross-Site Request Forgery (CSRF)

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...

CVE-2023-49396: Cross-Site Request Forgery (CSRF)

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/save...

CVE-2023-49372: Cross-Site Request Forgery (CSRF)

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...

PT-2023-31197 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS. The vulnerability can be exploited via the /admin/div/delete API endpoint. Recommendations: For JFinalCMS version 5.0.0, as a temporary...

CVE-2023-49395

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/update...

CVE-2023-49397

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/updateStatus...

CVE-2023-49379

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /admin/friendlink/save...