5 matches found
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=acteditmember"...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=actaddmember"...
CVE-2020-18265
Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=actaddmember"...
CVE-2020-18264
CVE-2020-18264 affects the open‑source blog system Simple-Log v1.6 . The issue is a Cross‑Site Request Forgery (CSRF) vulnerability that allows remote attackers to gain privileges and execute arbitrary code via the URL path Simple-Log/admin/admin.php?act=act_edit_member (and variants referenced i...
CVE-2020-18264
Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=acteditmember"...