CVE Vulnerability

CWE-352

CVE-2018-18794

by

School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.

CVE-2018-18797

by

School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.

CVE-2018-18799

by

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.

CVE-2018-18802

by

The Tubigan “Welcome to our Resort” 1.0 software allows CSRF via admin/mod_users/controller.php?action=edit.

CVE-2018-18734

by

A CSRF issue was discovered in admin/Index/addmanageuser.html in Catfish CMS 4.8.30.

CVE-2018-18735

by

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33.