Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user&act=multidelete...

CVE-2021-28070

Cross Site Request Forgery CSRF vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user&act=multidelete...

PT-2021-17734

Name of the Vulnerable Software and Affected Versions: PopojiCMS version 2.0.1 Description: A Cross Site Request Forgery CSRF issue exists, which can be exploited through the /po-admin/route.php?mod=user&act=multidelete API endpoint. This allows for potentially unauthorized actions on user...

CVE-2021-28070: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user&act=multidelete...

PT-2019-15676

Name of the Vulnerable Software and Affected Versions PopojiCMS version 2.0.1 Description The issue concerns a stored XSS vulnerability. It is related to the po-admin/route.php?mod=post&act=edit endpoint, where the post1content parameter is vulnerable. Recommendations For PopojiCMS version 2.0.1,...

CVE-2019-9549

An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935...

CVE-2019-9549

An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935...

CVE-2019-9549: Cross-Site Request Forgery (CSRF)

An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935...

PT-2019-19700

Name of the Vulnerable Software and Affected Versions PopojiCMS version 2.0.1 Description An issue was discovered in PopojiCMS, allowing CSRF via the "po-admin/route.php?mod=user&act=addnew" URI. This can be exploited to add a level=1 account. Recommendations For PopojiCMS version 2.0.1, as a...

CVE-2018-18935

An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=component&act=addnew URI, as demonstrated by adding a level=1 account...

CVE-2018-18935

An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=component&act=addnew URI, as demonstrated by adding a level=1 account...

CVE-2018-18935: Cross-Site Request Forgery (CSRF)

An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=component&act=addnew URI, as demonstrated by adding a level=1 account...

PT-2018-14732

Name of the Vulnerable Software and Affected Versions PopojiCMS version 2.0.1 Description An issue in admin library.php allows remote attackers to delete arbitrary files via directory traversal in the "po-admin/route.php?mod=library&act=delete" endpoint, specifically using the id parameter...

PT-2018-14731

Name of the Vulnerable Software and Affected Versions PopojiCMS version 2.0.1 Description The issue concerns a CSRF problem. It can be exploited via the "po-admin/route.php?mod=component&act=addnew" URI, allowing actions such as adding a level=1 account. Recommendations For PopojiCMS version 2.0....