Lucene search
+L

8 matches found

OSV
OSV
•added 2023/02/03 6:15 p.m.•18 views

CVE-2021-36443

Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...

8.8CVSS8.9AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/03 12:00 a.m.•1 views

CVE-2021-36443: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification...

8.8CVSS5.9AI score0.00612EPSS
SaveExploits1References3
CNVD
CNVD
•added 2022/01/16 12:00 a.m.•69 views

SuiteCRM Cross-Site Request Forgery Vulnerability

SuiteCRM is a customer relationship management system from the SuiteCRM Suitecrm team.SuiteCRM has a cross-site request forgery vulnerability in versions prior to 7.11.21, which stems from the software's lack of token validation for cross-site request forgery. If the ZIP archive file contains PHP...

8.8CVSS2.9AI score0.01033EPSS
SaveExploits0References1
Huntr
Huntr
•added 2021/10/14 3:25 p.m.•10 views

Cross-Site Request Forgery (CSRF) in pkp/omp

✍️ Description Attacker or malicious user is able to delete any user profile photo if a logged in user visits attacker website. because lack of CSRF token 🕵️‍♂️ Proof of Concept 1.when you logged in open this POC.html in a browser 2.you can check unintentionally your profile photo deleted...

1.1AI score
SaveExploits0
Huntr
Huntr
•added 2021/09/13 6:47 a.m.•15 views

Cross-Site Request Forgery (CSRF) in e107inc/e107

✍️ Description Attacker or malicious user is able to delete all caches if a logged in user visits attacker website. because lack of CSRF token. 🕵️‍♂️ Proof of Concept 1.when you logged in open this POC.html in a browser 2.you can check unintentionally all caches are cleared //POC.html...

1.3AI score
SaveExploits0
NVD
NVD
•added 2017/04/21 2:59 a.m.•19 views

CVE-2017-7951

WonderCMS before 2.0.3 has CSRF because of lack of a token in an unspecified context...

8.8CVSS8.8AI score0.00565EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/02 12:00 a.m.•4 views

CVE-2014-9694: Cross-Site Request Forgery (CSRF)

Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117...

8.8CVSS5.8AI score0.00589EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2015/02/18 12:00 a.m.•40 views

Ilch CMS Cross Site Request Forgery

Affected software: Ilch cms Type of vulnerability: csrf URL: http://www.ilch.de/ Discovered by: Provensec Website: http://www.provensec.com Description: Ilch cms profile field csrf Proof of concept http://demo.opensourcecms.com/ilch/admin.php?profilefields online demo Above field was vulnerable t...

0.6AI score
SaveExploits0
Rows per page
Query Builder