CVE-2018-7216

The CVE-2018-7216 entry pertains to the Bravo Tejari Procurement Portal, specifically the esop/toolkit/profile/regData.do path. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw arising from the lack of anti-CSRF tokens in requests that modify users’ personal data. Attackers who are a...

CVE-2018-7217

In CVE-2018-7217, the Bravo Tejari Procurement Portal allows uploading files that are not properly validated on either the client or server, enabling an attacker to upload malicious executables and compromise the application (demonstrated via the esop/evm/OPPreliminaryForms.do?formId=857 request)...