CVE Vulnerability

CWE-352

CVE-2019-9652

by

There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the t2 parameter.

CVE-2019-9596

by

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint.

CVE-2019-9597

by

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint.

CVE-2019-9598

by

An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds.

CVE-2019-9603

by

MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-2018-18891.

CVE-2019-9604

by

PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery (CSRF) for Edit Profile actions.