CWE-352

CVE-2019-8902

February 26, 2023 by

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users’ articles via the public/api.php?app=user URI.

CVE-2019-8910

February 26, 2023 by

An issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=site_post CSRF.

CVE-2019-8447

February 26, 2023 by

The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery (CSRF) vulnerability.

CVE-2019-8437

February 26, 2023 by

njiandan-cms through 2013-05-23 has index.php/admin/user_new CSRF to add an administrator.

CVE-2019-8347

February 26, 2023 by

BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=user URI.

CVE-2019-8234

February 26, 2023 by

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a cross-site request forgery vulnerability. Successful exploitation could lead to sensitive information disclosure.