CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2018/11/26 7:29 a.m.•23 views

CVE-2018-19560

BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account...

9.3CVSS8.7AI score0.00652EPSS

SaveExploits1References1

CVE•added 2018/11/26 7:00 a.m.•53 views

CVE-2018-19560

CVE-2018-19560 affects BageCMS 3.1.3. The vulnerability is a Cross‑Site Request Forgery (CSRF) where an attacker can trigger actions via the endpoint upload/index.php?r=admini/admin/ownerUpdate to modify a user account. Several connected sources (NVD, Red Hat, CVE registries, CNVD) corroborate th...

9.3CVSS8.5AI score0.00652EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2018/11/26 7:00 a.m.•31 views

CVE-2018-19560

BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account...

8.7AI score0.00652EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2018/11/26 12:00 a.m.•4 views

CVE-2018-19560: Cross-Site Request Forgery (CSRF)

BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account...

9.3CVSS7.8AI score0.00652EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by