Lucene search
+L

4 matches found

osv_cve
osv_cve
•added 2019/01/15 2:29 p.m.•21 views

CVE-2019-6294

An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI...

8.8CVSS6.9AI score0.00523EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2019/01/15 12:00 a.m.•8 views

PT-2019-18081

Name of the Vulnerable Software and Affected Versions EasyCMS version 1.5 Description An issue was discovered that allows for CSRF via the "index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent" URI. Recommendations For EasyCMS version 1.5, consider implementing proper...

8.8CVSS0.00523EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/15 12:00 a.m.•7 views

CVE-2019-6294: Cross-Site Request Forgery (CSRF)

An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI...

8.8CVSS5.8AI score0.00523EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/09/02 12:00 a.m.•9 views

PT-2018-13505

Name of the Vulnerable Software and Affected Versions EasyCMS version 1.5 Description An issue was discovered that allows for a CSRF vulnerability, enabling the update of the admin password. This is achieved via the index.php?s=/admin/rbacuser/update/navTabId/listusers/callbackType/closeCurrent...

8.8CVSS0.00523EPSS
SaveExploits1References3
Rows per page
Query Builder