CVE-2017-9934

CVE-2017-9934 저는 이 익스플로잇의 제보자이며, 이름: Envo입니다. Joomla 1.7.3 - 3.7.2 CSRF 익스플로잇 PoC 이 취약점은 Joomla 1.7.3부터 3.7.2 버전이 base64 입력을 검증하지 않기 때문에 발생합니다. Headers: POST http://localhost/joomla/administrator/index.php?option=commenus&view=item&clientid=0&layout=edit&id=0 HTTP/1.1 User-Agent: Mozilla/5.0 X11;...

CVE-2024-55271

Gym Management System CVE-2024-55271 Система управления фитнес-клубом, созданная с использованием PHP и MySQL. Аудитор Shoaib Alam - Профиль LinkedIn Описание CSRF-уязвимость в разделе обновления профиля В системе управления фитнес-клубом была обнаружена уязвимость типа Cross-Site Request Forgery...

CVE-2019-19652

CVE-2019-19652 Атака понижения версии Chevereto - 1.0.0 - 1.1.4 Free, = 3.13.5 Core. Администратор может указать скрипту обновления загрузить другую версию вместо обновления, возвращая предыдущие уязвимости. Из-за отсутствия CSRF-токена эта атака также может быть использована в CSRF-атаке, то ест...

TP-Link-Archer-CR-700-XSS-Exploit

TP-Link-Archer-CR-700-XSS-Exploit Эксплуатация роутера TP-Link Archer CR-700. Ответственно раскрыто в TP-Link Шаг 1 - На вашей Linux-машине Kali или Ubuntu введите следующую команду gedit /etc/dhcp/dhclient.conf Закомментируйте строку ниже send host-name = gethostname; Скопируйте её в строку под...

Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4

SCOPIA XT Desktop 버전 8.3.915.4에서 CSRF 악용 이 PoC는 SCOPIA XT Desktop 버전 8.3.915.4에서 Cross-Site Request ForgeryCSRF를 탐색하는 방법을 설명합니다. SCOPIA 정보 웹사이트: https://support.avaya.com/products/P1421/scopia-desktop/8.2.1 CSRFCross-Site Request Forgery 정보 사이트 간 요청 위조Cross-site request forgery는 원클릭 공격one-click...

CVE-2022-47131

CVE-2022-47131 Academy LMS history.pushState'', '', '/'...

CVE-2025-56311

CVE-2025-56311: Бюллетень безопасности – CSRF-уязвимость в функции перезагрузки маршрутизатора FD602GW-DX-R410 Доказательство концепции и бюллетень безопасности для уязвимости межсайтовой подделки запроса CSRF в административном интерфейсе оптоволоконного маршрутизатора FD602GW-DX-R410 прошивка...

CVE-2026-26718

Описание Сводка Уязвимость подделки межсайтовых запросов CSRF присутствует в веб-приложении xxl-job-admin, что позволяет злоумышленнику выполнять несанкционированные изменения скриптов оболочки Glue IDE. Затрагиваемая конечная точка не выполняет надлежащей проверки CSRF-токена и принимает...

CVE-2525-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7

CVE-2025-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7 Описание Уязвимость межсайтовой подделки запросов CSRF в конечной точке gestioneutenti.php HotelDruid 3.0.7 позволяет злоумышленникам выполнять несанкционированные действия например, изменять пароли пользователей от...

CVE-2026-85289 InvoicePlane: Missing CSRF Token Validation on Multiple Delete Endpoints

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane omits ensurevalidpostrequest from delete methods including Payments::delete, Recurring::delete, and Userclients::delete. Although the routes require POST, they do not...

CVE-2026-85289

The open-source application InvoicePlane (prior to version 1.7.2) is vulnerable to Cross-Site Request Forgery (CSRF) due to missing CSRF token validation on specific delete methods. Specifically, the Payments::delete(), Recurring::delete(), and User_clients::delete() functions omit the ensure_val...

CVE-2026-90903 Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0

Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 - The administrator ApiController only validated CSRF tokens inside the products action. All other administrative AJAX endpoints orders, coupons, media,...

EUVD-2026-85558

Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 - The administrator ApiController only validated CSRF tokens inside the products action. All other administrative AJAX endpoints orders, coupons, media,...

CVE-2026-90900 Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0

Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0 - The product review submission endpoint index.php?option=comeasystore&task=product.addReview accepted submissions without verifying an anti-CSRF token t...

VulnCheck KEV: CVE-2026-75949

Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion path traversal in J-BusinessDirectory 6.2.3 - Upload/remove accepted a client-controlled root pathtype could point at the component site/admin trees, did not enforce path containment, and used a weak extension check. CSRF token w...

CVE-2026-18425

Concrete CMS 9 before 9.5.3 authorized the dashboard sitemap reorder action Concrete\Controller\Backend\Dashboard\SitemapUpdate using only the global accesssitemap task permission and did not check per-page edit permission before updating each page's display order. As a result, an authenticated...

CVE-2026-81925

Concrete CMS versions before 9.5.3 contain a reflected cross-site scripting (XSS) vulnerability in the conversation view endpoint . A user-supplied custom date format was improperly neutralized when rendering conversation messages, allowing an attacker to execute arbitrary JavaScript in a victim'...

EUVD-2026-76246

Concrete CMS before 9.5.3 did not validate an anti-CSRF token in the Calendar event duplicate dialog controller concrete/controllers/dialog/event/duplicate.php submit action, which duplicated a calendar event after checking only canAccess and the per-resource canAddCalendarEvent permission, so a...

PT-2026-89383

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the setPassword.json.php endpoint that allows unauthenticated attackers to modify any user's channel password by sending a GET request. Attackers can craft a malicious webpage tha...

Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

Summary The password change form is vulnerable to CSRF, allowing an attacker to change a user password even the administrator by tricking a connected user to visit a malicious website. The vulnerability has been tested with version 2.18.20. Details The password change endpoint of Semaphore UI doe...