cross-site request forgery vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

phpMyAdmin versions 4.7.x (before 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc.

Phpmyadmin Phpmyadmin

1 EDB exploit1 Github repository

NA

M/Monit 3.3.2 and previous versions does not verify the original password before changing passwords, which allows remote malicious users to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-640...

Mmonit M\\/monit

1 EDB exploit

8.8

CVSSv3

An issue exists in GreenCMS v2.3.0603. There is a CSRF vulnerability that can add an admin account via index.php?m=admin&c=access&a=adduserhandle.

Njtech Greencms 2.3.0603

1 EDB exploit

8.8

CVSSv3

index.php?m=member&v=pw_reset in WUZHI CMS 4.1.0 allows CSRF to change the password of a common member.

Wuzhicms Wuzhi Cms 4.1.0

1 EDB exploit

NA

Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote malicious users to hijack the authentication of administrators for requests that (1) add administrator accounts via a member_new action to my_admin/admin1_members.php or (2) modify the defa...

Socialcms Socialcms 1.0.2

2 EDB exploits

7.5

CVSSv3

Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of users for requests that change passwords via a crafted request to userSettings.view.

Subsonic Subsonic 6.1.1

1 EDB exploit

8.8

CVSSv3

An issue exists on DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 devices. A Cross-site request forgery (CSRF) vulnerability allows remote malicious users to hijack the authentication of users for requests that modify all the settings. This vulne...

Dodocool Dc38 Firmware Rtn2-aw.gd.r3465.1.20161103

1 EDB exploit

8.8

CVSSv3

Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM prior to 3.7 allow remote malicious users to hijack the authentication of administrators.

Emc Vipr Srm

1 EDB exploit

8.8

CVSSv3

Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote malicious users to hijack the authentication of logged administrators to (1) add an administrator user via a crafted POST request to <vimbadmi...

Vimbadmin Vimbadmin 3.0.15

1 EDB exploit

8.8

CVSSv3

Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password.

Schben Adive 2.0.7

1 EDB exploit

Get Started

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook