Vulnerabilities > Cross-Site Request Forgery (CSRF)

DATE CVE VULNERABILITY TITLE RISK
2018-09-16 CVE-2018-17104 Cross-Site Request Forgery (CSRF) vulnerability in Microweber 1.0.7
An issue was discovered in Microweber 1.0.7.
network
low complexity
microweber CWE-352
8.8
2018-09-16 CVE-2018-17103 Cross-Site Request Forgery (CSRF) vulnerability in Get-Simple Getsimple CMS 3.3.13
An issue was discovered in GetSimple CMS v3.3.13.
network
low complexity
get-simple CWE-352
8.8
2018-09-16 CVE-2018-17102 Cross-Site Request Forgery (CSRF) vulnerability in Quickappscms Quickapps CMS
An issue was discovered in QuickAppsCMS (aka QACMS) through 2.0.0-beta2.
network
low complexity
quickappscms CWE-352
8.8
2018-09-15 CVE-2018-17070 Cross-Site Request Forgery (CSRF) vulnerability in Unlcms 7.59
An issue was discovered in UNL-CMS 7.59.
network
low complexity
unlcms CWE-352
6.5
2018-09-15 CVE-2018-17069 Cross-Site Request Forgery (CSRF) vulnerability in Unlcms 7.59
An issue was discovered in UNL-CMS 7.59.
network
low complexity
unlcms CWE-352
6.5
2018-09-14 CVE-2018-17045 Cross-Site Request Forgery (CSRF) vulnerability in CMS Maelostore Project CMS Maelostore 1.5.0
An issue was discovered in CMS MaeloStore V.1.5.0.
network
low complexity
cms-maelostore-project CWE-352
8.8
2018-09-13 CVE-2018-17023 Cross-Site Request Forgery (CSRF) vulnerability in Asus Gt-Ac5300 Firmware
Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384_32738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to start_apply.htm.
network
low complexity
asus CWE-352
8.8
2018-09-12 CVE-2018-16951 Cross-Site Request Forgery (CSRF) vulnerability in Xunfeng Project Xunfeng 0.2.0
xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832.
network
low complexity
xunfeng-project CWE-352
8.0
2018-09-11 CVE-2018-16832 Cross-Site Request Forgery (CSRF) vulnerability in Xunfeng Project Xunfeng 0.2.0
CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header.
network
low complexity
xunfeng-project CWE-352
6.5
2018-09-10 CVE-2016-7067 Cross-Site Request Forgery (CSRF) vulnerability in Mmonit Monit
Monit before version 5.20.0 is vulnerable to a cross site request forgery attack.
network
low complexity
mmonit CWE-352
6.5