CVE-2026-30251

A reflected cross-site scripting XSS vulnerability in the loginnewpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codiceazienda parameter...

CVE-2024-7161: Cross-Site Request Forgery (CSRF)

A vulnerability classified as problematic was found in SeaCMS 13.0. Affected by this vulnerability is an unknown functionality of the file /member.php?action=chgpwdsubmit of the component Password Change Handler. The manipulation of the argument newpwd/newpwd2 leads to cross-site request forgery...

SeaCMS 跨站请求伪造漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A cross-site request forgery vulnerability exists in SeaCMS version 13.0, which stems from the fact that manipulation of the parameters...

PT-2023-32444 · Byzoro · Byzoro Smart S85F Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S85F Management Platform version V31R02B10-01 Description: A problematic issue was found in the Byzoro Smart S85F Management Platform, affecting an unknown function of the file /login.php. The manipulation of the txt newpwd...