Cross site request forgery (csrf)

Readymade Video Sharing Script has CSRF via user-profile-edit.php...

CVE-2017-17891: Cross-Site Request Forgery (CSRF)

Readymade Video Sharing Script has CSRF via user-profile-edit.php...

CVE-2017-17893: Improper Neutralization of Input During Web Page Generation

Readymade Video Sharing Script has XSS via the searchvideo.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter...

CVE-2017-17893

Readymade Video Sharing Script has XSS via the searchvideo.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter...

CVE-2017-17893

The following CVE concerns the Readymade Video Sharing Script (PHP Scripts Mall). It has a stored/reflected Cross‑Site Scripting (XSS) vulnerability exploitable via user input parameters: search_video.php using the search parameter, viewsubs.php using the chnlid parameter, and user-profile-edit.p...

CVE-2017-17891

CVE-2017-17891 affects Readymade Video Sharing Script. The vulnerability is a cross-site request forgery (CSRF) in the user-profile-edit.php endpoint. According to CNVD-2018-01938 and corroborating sources, a remote attacker can lure a logged‑in user to trigger changes to sensitive settings via t...

PT-2017-15076

Name of the Vulnerable Software and Affected Versions Readymade Video Sharing Script affected versions not specified Description The issue concerns a CSRF vulnerability in the user-profile-edit.php file. Recommendations At the moment, there is no information about a newer version that contains a...

PT-2012-2052

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! versions prior to 3.65 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for...