Cross-site Request Forgery (CSRF)

Overview admidio/admidio is a free open source user management system for websites of organizations and groups. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the modules/plugins.php process. An attacker can trigger unauthorized plugin installation,...

SUSE CVE-2008-2147

Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory...

CVE-2019-7357

Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins...

PT-2020-11245

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description The issue concerns a CSRF vulnerability in the panel/modules/plugins/ endpoint. This allows an attacker to remotely activate or deactivate plugins. Recommendations For Subrion CMS version 4.2.1, consider...

CVE-2019-7357: Cross-Site Request Forgery (CSRF)

Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins...