7 matches found
EUVD-2022-6532
Malicious code in bioql PyPI...
CVE-2018-14519
An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can craft a malicious CSRF page and force the user to delete a page...
Code injection
An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages...
CVE-2018-14519
CVE-2018-14519 affects Kirby 2.5.12. The delete page functionality is vulnerable to cross-site request forgery (CSRF): a remote attacker can craft a malicious page that causes a user to delete a page. This is the vulnerability described across multiple sources (Kirby CMS context). The material no...
CVE-2018-14520
CVE-2018-14520 affects Kirby CMS version 2.5.12. The vulnerability allows malicious HTTP requests to prompt a user to add web pages, indicating an issue likely related to input handling and request authenticity. The NVD CVSSv3.1 base score is 5.4 (Medium) with Network attack vector, Low attack co...
