Lucene search
+L

367 matches found

Github Security Blog
Github Security Blog
added 2023/12/05 3:30 p.m.29 views

Cross-Site Request Forgery in JFinalCMS via /admin/slide/update

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/update...

8.8CVSS7.5AI score0.00391EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2023/12/05 3:30 p.m.19 views

Cross-Site Request Forgery in JFinalCMS

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/slide/delete...

8.8CVSS7.5AI score0.00391EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2023/12/05 3:30 p.m.25 views

Cross-Site Request Forgery in JFinalCMS

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...

8.8CVSS7.5AI score0.00391EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/12/05 3:15 p.m.5 views

CVE-2023-49374

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/update...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits1References2
NVD
NVD
added 2023/12/05 3:15 p.m.22 views

CVE-2023-49372

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...

8.8CVSS0.00391EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/12/05 3:15 p.m.4 views

CVE-2023-49372

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/12/05 3:15 p.m.3 views

CVE-2023-49373

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/slide/delete...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits1References2
NVD
NVD
added 2023/12/05 3:15 p.m.24 views

CVE-2023-49373

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/slide/delete...

8.8CVSS0.00391EPSS
SaveExploits1References1
Prion
Prion
added 2023/12/05 3:15 p.m.16 views

Cross site request forgery (csrf)

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/update...

6.8CVSS7.8AI score0.00391EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/12/05 3:15 p.m.20 views

Cross site request forgery (csrf)

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/slide/delete...

6.8CVSS7.7AI score0.00391EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.8 views

JFinalCMS Security Vulnerability

JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS v5.0.0, which originates from a cross-site request forgery vulnerability in the /admin/slide/save component...

8.8CVSS8.4AI score0.00391EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/12/05 12:0 a.m.6 views

PT-2023-31186 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS. The vulnerability can be exploited via the /admin/slide/save API endpoint. Recommendations: For JFinalCMS version 5.0.0, update to a...

8.8CVSS8.7AI score0.00391EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.4 views

JFinalCMS Security Vulnerability

JFinalCMS is a content management system by heyewei individual developer. A security vulnerability exists in JFinalCMS v5.0.0, which originates from a cross-site request forgery vulnerability in the /admin/slide/update component...

8.8CVSS8.5AI score0.00391EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/12/05 12:0 a.m.30 views

CVE-2023-49372

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...

9.1AI score0.00391EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/12/05 12:0 a.m.29 views

CVE-2023-49373

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/slide/delete...

9.1AI score0.00391EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/12/05 12:0 a.m.35 views

CVE-2023-49374

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/update...

9.1AI score0.00391EPSS
SaveExploits1References1
OSV
OSV
added 2023/12/05 12:0 a.m.17 views

CVE-2023-49373

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/slide/delete...

8.8CVSS8.9AI score0.00391EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/05 12:0 a.m.15 views

CVE-2023-49372

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...

8.8CVSS8.9AI score0.00391EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/12/05 12:0 a.m.6 views

PT-2023-31187 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS. The issue is related to the /admin/slide/delete API endpoint. This allows for unauthorized actions to be performed on the application...

8.8CVSS8.5AI score0.00391EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.6 views

JFinalCMS Security Vulnerability

JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS v5.0.0, which originates from a cross-site request forgery vulnerability in the /admin/slide/delete component...

8.8CVSS8.4AI score0.00391EPSS
SaveExploits1References1
Rows per page
Query Builder