CWE-352

CVE-2018-13040

February 26, 2023 by

OpenSID 18.06-pasca has a CSRF vulnerability. This vulnerability can add an account (at the admin level) via the index.php/man_user/insert URI.

February 26, 2023 by

EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users.

February 26, 2023 by

In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.

February 26, 2023 by

An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges.

February 26, 2023 by

SLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain admin access by omitting the csrf_token parameter.

February 26, 2023 by

A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.