20 matches found
CVE-2018-9108
CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges...
EUVD-2022-2688
Malicious code in bioql PyPI...
EUVD-2022-2224
Malicious code in bioql PyPI...
QuickAppsCMS Cross-Site Request Forgery (CSRF)
CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges...
GHSA-62G2-8P9F-GHJP QuickAppsCMS Cross-Site Request Forgery (CSRF)
CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges...
QuickAppsCMS Cross-Site Request Forgery (CSRF)
An issue was discovered in QuickAppsCMS aka QACMS through 2.0.0-beta2. A CSRF vulnerability can change the administrator password via the user/me URI...
GHSA-3P9V-XP6W-WCMC QuickAppsCMS Cross-Site Request Forgery (CSRF)
An issue was discovered in QuickAppsCMS aka QACMS through 2.0.0-beta2. A CSRF vulnerability can change the administrator password via the user/me URI...
CVE-2018-17102
An issue was discovered in QuickAppsCMS aka QACMS through 2.0.0-beta2. A CSRF vulnerability can change the administrator password via the user/me URI...
CVE-2018-17102
An issue was discovered in QuickAppsCMS aka QACMS through 2.0.0-beta2. A CSRF vulnerability can change the administrator password via the user/me URI...
Cross site request forgery (csrf)
An issue was discovered in QuickAppsCMS aka QACMS through 2.0.0-beta2. A CSRF vulnerability can change the administrator password via the user/me URI...
CVE-2018-17102
CVE-2018-17102 affects QuickAppsCMS (QACMS) up to version 2.0.0-beta2. The issue is a Cross-Site Request Forgery (CSRF) vulnerability that can change the administrator password via the /user/me URI. Documented impact indicates high-severity outcomes (e.g., unauthorized password change) with netwo...
CVE-2018-17102: Cross-Site Request Forgery (CSRF)
An issue was discovered in QuickAppsCMS aka QACMS through 2.0.0-beta2. A CSRF vulnerability can change the administrator password via the user/me URI...
PT-2018-13896
Name of the Vulnerable Software and Affected Versions QuickAppsCMS versions through 2.0.0-beta2 Description An issue allows a CSRF vulnerability to change the administrator password via the "user/me" URI. Recommendations For versions through 2.0.0-beta2, update to a version that contains a fix fo...
CVE-2018-9108
CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges...
CVE-2018-9108
CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges...
CVE-2018-9108
CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges...
CVE-2018-9108
CVE-2018-9108 affects QuickAppsCMS 2.0.0-beta2. Description: CSRF in /admin/user/manage/add allows an unauthorized remote attacker to create an admin account. CVSS3 base score 8.8 (HIGH); attack vector NETWORK; user interaction REQUIRED; confidentiality/ integrity/availability HIGH. No remediatio...
CVE-2018-9108
CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges...
CVE-2018-9108: Cross-Site Request Forgery (CSRF)
CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges...
PT-2018-18857
Name of the Vulnerable Software and Affected Versions QuickAppsCMS version 2.0.0-beta2 Description The issue allows an unauthorized remote attacker to create an account with admin privileges due to a CSRF vulnerability in the /admin/user/manage/add API endpoint. Recommendations For QuickAppsCMS...