CVE-2022-26180

qdPM 9.2 allows Cross-Site Request Forgery CSRF via the index.php/myAccount/update URI...

CVE-2022-26180

qdPM 9.2 allows Cross-Site Request Forgery CSRF via the index.php/myAccount/update URI...

Cross site request forgery (csrf)

qdPM 9.2 allows Cross-Site Request Forgery CSRF via the index.php/myAccount/update URI...

CVE-2022-26180

qdPM 9.2 allows Cross-Site Request Forgery CSRF via the index.php/myAccount/update URI...

CVE-2022-26180

The CVE-2022-26180 describes a CSRF vulnerability in qdPM 9.2 that can be exploited via the index.php/myAccount/update URI due to lack of CSRF token validation. Impact is high (C/H/I/A = High) with CVSS 3.1 base score 8.8; basic user interaction required (per the NVD entry). Exploitation details ...

PT-2022-17708 · Qdpm · Qdpm

Name of the Vulnerable Software and Affected Versions: qdPM version 9.2 Description: The issue allows Cross-Site Request Forgery CSRF via the "index.php/myAccount/update" URI. This means an attacker can trick a user into performing unintended actions on the web application. Recommendations: For...

qdPM 9.2 Cross Site Request Forgery

Exploit Title: qdPM 9.2 - Cross-site Request Forgery CSRF Google Dork: NA Date: 03/27/2022 Exploit Author: Chetanya Sharma @AggressiveUser Vendor Homepage: https://qdpm.net/ Software Link: https://sourceforge.net/projects/qdpm/files/latest/download Version: 9.2 Tested on: KALI OS CVE :...

qdPM 9.2 - Cross-site Request Forgery Vulnerability

Exploit Title: qdPM 9.2 - Cross-site Request Forgery CSRF Google Dork: NA Exploit Author: Chetanya Sharma @AggressiveUser Vendor Homepage: https://qdpm.net/ Software Link: https://sourceforge.net/projects/qdpm/files/latest/download Version: 9.2 Tested on: KALI OS CVE : CVE-2022-26180...

qdPM 跨站请求伪造漏洞

qdPM is a Web-based open source project management tool. A cross-site request forgery vulnerability exists in qdPM version 9.2. The vulnerability stems from the lack of token validation in the software for cross-site request forgery, resulting in a cross-site request forgery vulnerability...

qdPM 9.2 - Cross-site Request Forgery (CSRF)

Exploit Title: qdPM 9.2 - Cross-site Request Forgery CSRF Google Dork: NA Date: 03/27/2022 Exploit Author: Chetanya Sharma @AggressiveUser Vendor Homepage: https://qdpm.net/ Software Link: https://sourceforge.net/projects/qdpm/files/latest/download Version: 9.2 Tested on: KALI OS CVE :...

CVE-2020-19515

qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php...

Cross site scripting

qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php...

CVE-2020-19515

qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php...

CVE-2020-19515

qdPM 9.1 is vulnerable to Cross-Site Scripting via qdPM\install\modules\database_config.php. The root cause is insufficient validation of user-supplied data in that configuration file, enabling injection of malicious scripts into pages viewed by users. Impact could include data theft, session hij...

qdPM 跨站脚本漏洞

qdPM is a Web-based open source project management tool. A cross-site scripting vulnerability exists in qdPM, which stems from the lack of valid validation of user-side data in the product qdPMinstallmodulesdatabaseconfig.php file. The vulnerability can be exploited to execute client-side code. T...

CVE-2020-18468

Cross Site Scripting XSS vulnerability exists in qdPM 9.1 in the Heading field found in the Login Page page under the General menu via a crafted website name by doing an authenticated POST HTTP request to /qdPM9.1/index.php/configuration...

CVE-2020-18468

Cross Site Scripting XSS vulnerability exists in qdPM 9.1 in the Heading field found in the Login Page page under the General menu via a crafted website name by doing an authenticated POST HTTP request to /qdPM9.1/index.php/configuration...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in qdPM 9.1 in the Heading field found in the Login Page page under the General menu via a crafted website name by doing an authenticated POST HTTP request to /qdPM9.1/index.php/configuration...

CVE-2020-18468

Cross Site Scripting XSS vulnerability exists in qdPM 9.1 in the Heading field found in the Login Page page under the General menu via a crafted website name by doing an authenticated POST HTTP request to /qdPM9.1/index.php/configuration...

CVE-2020-18468

CVE-2020-18468 affects qdPM 9.1. An XSS exists in the Login Page heading field under the General menu, exploitable via a crafted website name through an authenticated POST to /qdPM_9.1/index.php/configuration. The issue stems from insufficient input validation on the heading, enabling client-side...