4 matches found
CVE-2019-6294
An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI...
PT-2019-18081
Name of the Vulnerable Software and Affected Versions EasyCMS version 1.5 Description An issue was discovered that allows for CSRF via the "index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent" URI. Recommendations For EasyCMS version 1.5, consider implementing proper...
CVE-2019-6294: Cross-Site Request Forgery (CSRF)
An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI...
PT-2018-13505
Name of the Vulnerable Software and Affected Versions EasyCMS version 1.5 Description An issue was discovered that allows for a CSRF vulnerability, enabling the update of the admin password. This is achieved via the index.php?s=/admin/rbacuser/update/navTabId/listusers/callbackType/closeCurrent...