21 matches found
CVE-2021-31677
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords...
EUVD-2021-18562
Malware in sbrugna...
EUVD-2021-18564
Malware in sbrugna...
CVE-2021-31677
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords...
CVE-2021-31678
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user's company...
CVE-2021-31679
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers...
CVE-2021-31677
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords...
CVE-2021-31678
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user's company...
CVE-2021-31679
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers...
CVE-2021-31676
A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction...
CVE-2021-31676
A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction...
Cross site request forgery (csrf)
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers...
Design/Logic Flaw
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user's company...
Design/Logic Flaw
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords...
Cross site request forgery (csrf)
A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction...
CVE-2021-31678
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user's company...
CVE-2021-31678
CVE-2021-31678 describes a CSRF vulnerability in PESCMS-V2.3.3 that can delete a user’s company import information. Multiple connected sources (NVD, Red Hat, CNVD, OSV, CNVD etc.) corroborate the impact on PESCMS-V2.3.3. The records do not provide a patch version or remediation steps within the d...
CVE-2021-31679
The CVE-2021-31679 entry concerns PESCMS-V2.3.3 and describes a CSRF vulnerability that allows an attacker to delete admin and other members’ account numbers. Affected component is the web application’s account-management flow; root cause is insufficient CSRF protection enabling unauthorized stat...
CVE-2021-31677
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords...
CVE-2021-31677
CVE-2021-31677 concerns PESCMS-V2.3.3, where a cross-site request forgery (CSRF) vulnerability can modify passwords for administrators and other members. The issue is described consistently across sources as affecting PESCMS version 2.3.3 and enabling unauthorized password changes via CSRF. Publi...