Gas Agency Management version 2022 suffers from a cross site request forgery vulnerability.
6a250ada2601bac77bf32e0acac068040df66e276b76551461e99857892cb652Computer and Mobile Repair Shop Management System version 1.0 suffers from a cross site request forgery vulnerability.
10a29f1a3d4329d2c54a54998a1497a4053a45326c061bbdb1cdf738b8957608Employee Management System version 1.0 suffers from a cross site request forgery vulnerability.
0807edb2026bb862bdc3ccf77a17d983c00424b86536fe0854d17a6817047594Yoga Class Registration System version 1.0 suffers from a cross site request forgery vulnerability.
f297b6b68f402ec60abb9645304789ca18f7d02e2fbd9a8818252d86cfc671ffAccPack Khanepani version 1.0 suffers from a cross site request forgery vulnerability.
52bc25bfe3e1b38b1fc336435e070fb91c14640c03bcd60081118a3a598cfb03AccPack Cop version 1.0 suffers from a cross site request forgery vulnerability.
9019bcc0149f6bd585eeb57145abd8d8ab36247d7e4f551459497d7ef6a6c872Aero CMS version 0.0.1 suffers from a cross site request forgery vulnerability.
d177460484605e92448747eb5276d4dbc65842e8466efab16cfdeff8b9e1e531An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests do not require anti-CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For example, an attack could deliver a worrisome printout to an end user.
b7785d8c05a1d7473dea688d8071986f96d4de3f7e475adfd7705ee49de89ef0An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection.
1b4dfe24cfa2bbe9c0737b6cd595fc715eaa981c261cfb0dec4dc1161934e692AccPack Buzz Cop version 1.0 suffers from a cross site request forgery vulnerability.
dc23004e940aed6e3dfaad992d17e70088478a86a99608f63b3822fa94af6189XenForo versions 2.2.15 and below suffer from a cross site request forgery vulnerability in Widget::actionSave.
a2e0e2c93fd20ac00f325a1d77c282bae74c903affae30dd55518d5333641874WordPress PZ Frontend Manager plugin versions 1.0.5 and below suffer from a cross site request forgery vulnerability in the change user profile picture functionality.
71b1a540c9b3265fc977fa30c1fda5b93cf9333b67a049926eee9138c3fa55c1Cinema Booking System version 1.0 suffers from remote SQL injection and cross site request forgery vulnerabilities.
17d99c784f15844038509b9dcb7cc2e0afbcdebbac5e213e1d14c2427df6d660Carbon Forum version 5.9.0 suffers from access control, cross site request forgery, file upload, outdated library, and remote SQL injection vulnerabilities.
cba504421b68519aaed702319b854c39235fc60743041d75670a496471266424Paradox IP150 Internet Module version 1.40.00 suffers from a cross site request forgery vulnerability.
9e102cbe93f6192c8caedc9ff1e998a3150ce7386317dc22ddbf5e4b3f736fbfPanel.SmokeLoader malware suffers from cross site request forgery, and cross site scripting vulnerabilities.
ef278eac34255b166212b8c3d391b9134c5e614f5beadcfc77d5664154f0a7deSOPlanning version 1.52.00 suffers from a cross site request forgery vulnerability in xajax_server.php.
a3c73b7d4acc8e32c7247c327692a33f62025c56af9edaa24b5dfff34103fc5aRed Hat Security Advisory 2024-0692-03 - An update is now available for Red Hat OpenShift GitOps v1.10.2. Issues addressed include cross site request forgery, denial of service, and traversal vulnerabilities.
57186fb201c2a67b6d9e056c94b357cf2ab5c8553dea6f5ead3a46074c62785dRed Hat Security Advisory 2024-0691-03 - An update is now available for Red Hat OpenShift GitOps v1.9.4. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link in the References section. Issues addressed include cross site request forgery, denial of service, and traversal vulnerabilities.
82af22a6e38cb506d44fc04c2626a1c0992c314db7225f5d4421a07d6b467ab6Red Hat Security Advisory 2024-0689-03 - An update is now available for Red Hat OpenShift GitOps v1.11. Issues addressed include a cross site request forgery vulnerability.
403beb4a6d3705a0f787c7f7e0212c239ae35e2c4170c5778d00603636e4d5a3SuperStoreFinder versions 3.7 and below suffer from cross site request forgery, remote command execution, and remote SQL injection vulnerabilities.
8a5a27ee2cdba842a87bb56778f36fe0e630257be6595b634453cc2afcaf8a8cITFlow versions prior to commit 432488eca3998c5be6b6b9e8f8ba01f54bc12378 suffer from a cross site request forgery vulnerability.
e3baa15b97468f1a53ed93305b65d681ec3ea083d106863615e6c678b4218084Red Hat Security Advisory 2024-0778-03 - An update for Jenkins and Jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.12. Issues addressed include bypass, code execution, cross site request forgery, cross site scripting, denial of service, improper authorization, information leakage, insecure permissions, and open redirection vulnerabilities.
ab4f43b9e71e063c24e6665055c78987e13d3b3ffaeb136bf2ca4c7222838cb2Red Hat Security Advisory 2024-0777-03 - An update for jenkins and jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.14. Issues addressed include bypass, code execution, cross site request forgery, cross site scripting, denial of service, information leakage, and open redirection vulnerabilities.
3eed8a402985e9201b2959d777e66d6b3d4c828342daf0e2047df99c9352d53fGrocy versions 4.0.2 and below suffer from a cross site request forgery vulnerabilities.
8a9d5dbb9c863db010ccc5c72b8a8ce2a60d29424a64648b8ed644b847a9f54f
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed