PT-2019-19037

Name of the Vulnerable Software and Affected Versions njiandan-cms versions prior to 2013-05-23 Description The issue allows for a CSRF attack via the index.php/admin/user new endpoint to add an administrator. Recommendations For versions prior to 2013-05-23, update to a version released after...

CVE-2017-9673

In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account via the index.php/user/new URI or change its settings via the index.php/user/1 URI, including its password...

CVE-2017-9673: Cross-Site Request Forgery (CSRF)

In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account via the index.php/user/new URI or change its settings via the index.php/user/1 URI, including its password...

PT-2017-19108

Name of the Vulnerable Software and Affected Versions SimpleCE version 2.3.0 Description A CSRF issue can be exploited to add an administrator account or change its settings, including the password, by accessing specific API endpoints such as "index.php/user/new" or "index.php/user/1"...

PT-2014-3568

Name of the Vulnerable Software and Affected Versions Serena Dimensions CM version 12.2 build 7.199.0 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that use the user new master parameter to the...

PT-2012-3667 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions 3.3.1 and earlier Description: The issue is related to the wp create nonce function, which associates a nonce with a user account instead of a user session. This might make it easier for remote attackers to conduct cross-si...

CVE-2010-0709: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Limny 2.0 allow remote attackers to 1 hijack the authentication of users or administrators for requests that change the email address or password via the user action to index.php, and 2 hijack the authentication of the administrator for...