EUVD-2019-19054

Malware in sbrugna...

Cross site request forgery (csrf)

sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=addpost CSRF to add an admin account...

CVE-2019-9688

sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=addpost CSRF to add an admin account...

CVE-2019-9688

sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=addpost CSRF to add an admin account...

CVE-2019-9688

sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=addpost CSRF to add an admin account...

CVE-2019-9688

CVE-2019-9688 (sftnow) is a CSRF vulnerability in sftnow up to 2018-12-29 that allows an attacker to trigger index.php?g=Admin&m=User&a=add_post to add an admin account. Connected sources confirm a cross-site request forgery flaw exists in sftnow 2018-12-29 and earlier versions. The provided docu...