PT-2019-9540

Name of the Vulnerable Software and Affected Versions LayerBB versions prior to 1.1.3 Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can be used to perform unauthorized actions such as adding a user via "admin/new user.php", deleting a user via...

PT-2018-18899

Name of the Vulnerable Software and Affected Versions Contec Smart Home version 4.15 Description The issue allows unauthorized access to certain PHP files, including new user.php, edit user.php, delete user.php, and user.php, without requiring authentication. This can be exploited to change the...