8 matches found
EUVD-2019-17827
Malware in sbrugna...
CVE-2019-8437
njiandan-cms through 2013-05-23 has index.php/admin/usernew CSRF to add an administrator...
CVE-2019-8437
njiandan-cms through 2013-05-23 has index.php/admin/usernew CSRF to add an administrator...
Cross site request forgery (csrf)
njiandan-cms through 2013-05-23 has index.php/admin/usernew CSRF to add an administrator...
CVE-2019-8437
The CVE concerns njiandan-cms with a CSRF vulnerability in the index.php/admin/user_new endpoint, allowing an attacker to add an administrator. The NVD entry (CVE-2019-8437) notes exploitation via this CSRF path and provides CVSS metrics (v2: 6.8 MEDIUM; v3: 8.8 HIGH) indicating impact to confide...
CVE-2019-8437
njiandan-cms through 2013-05-23 has index.php/admin/usernew CSRF to add an administrator...
PT-2019-19037
Name of the Vulnerable Software and Affected Versions njiandan-cms versions prior to 2013-05-23 Description The issue allows for a CSRF attack via the index.php/admin/user new endpoint to add an administrator. Recommendations For versions prior to 2013-05-23, update to a version released after...
