Cross site request forgery (csrf)

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

CVE-2018-6656

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

CVE-2018-6656

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

CVE-2018-6656

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

CVE-2018-6656

Summary: CVE-2018-6656 affects Z-BlogPHP 1.5.1 with a cross‑site request forgery (CSRF) vulnerability in zb_users/plugin/AppCentre/app_del.php. The vulnerability enables a remote attacker to trigger actions that delete files and directories under the user area, as described in CNVD-2018-05361 and...

CVE-2018-6656

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

CVE-2018-6656: Cross-Site Request Forgery (CSRF)

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

PT-2018-17698

Name of the Vulnerable Software and Affected Versions Z-BlogPHP version 1.5.1 Description The issue allows for CSRF via "zb users/plugin/AppCentre/app del.php", which can be exploited to delete files and directories. Recommendations For Z-BlogPHP version 1.5.1, consider restricting access to the...