27 matches found
EUVD-2020-16374
Malware in sbrugna...
EUVD-2020-14426
Malware in sbrugna...
EUVD-2020-14416
Malware in sbrugna...
CVE-2020-23631
Cross-site request forgery CSRF in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting XSS attacks via the tongji parameter...
CVE-2020-21658
A Cross-Site Request Forgery CSRF in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL...
CVE-2020-21648
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...
CVE-2020-21658
A Cross-Site Request Forgery CSRF in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL...
CVE-2020-21648
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...
Cross site request forgery (csrf)
A Cross-Site Request Forgery CSRF in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL...
Arbitrary file deletion
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...
CVE-2020-21658
A Cross-Site Request Forgery CSRF in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL...
CVE-2020-21658
The CVE-2020-21658 entry describes a CSRF vulnerability in WDJA CMS v1.5.2 that allows an attacker to arbitrarily add administrator accounts via a crafted URL. Affected product/version: WDJA CMS 1.5.2. Root cause: insufficient CSRF protection on account-creation/administrator-adding functionality...
CVE-2020-21648
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...
CVE-2020-21648
CVE-2020-21648 affects WDJA CMS v1.5.2 with an arbitrary file deletion vulnerability in admin/cache/manage.php. The issue is documented across multiple sources (NVD/Red Hat/CVE). The root cause details are not provided beyond the vulnerability location; impact is deletion of arbitrary files. CVSS...
CVE-2020-21658: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL...
PT-2021-10656
Name of the Vulnerable Software and Affected Versions: WDJA CMS version 1.5.2 Description: A Cross-Site Request Forgery CSRF issue allows attackers to add administrator accounts using a crafted URL. Recommendations: For WDJA CMS version 1.5.2, update to a newer version that contains a fix for thi...
CVE-2020-21648: Undefined Security Weakness
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...
PT-2021-10648
Name of the Vulnerable Software and Affected Versions: WDJA CMS version 1.5.2 Description: The issue is related to an arbitrary file deletion vulnerability. It affects the component admin/cache/manage.php. Recommendations: For WDJA CMS version 1.5.2, consider restricting access to the...
Wdja Cross-Site Scripting Vulnerability
Wdja is a Php-based content management system from the Wdja team. A cross-site scripting vulnerability exists in WDJA CMS version 1.5, where the vulnerability tongji parameter does not do XSS filtering on user input, which can be exploited by an attacker to steal user credentials...