Vulnerabilities > Cross-Site Request Forgery (CSRF)
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-09-16 | CVE-2018-17104 | Cross-Site Request Forgery (CSRF) vulnerability in Microweber 1.0.7 An issue was discovered in Microweber 1.0.7. | 8.8 |
2018-09-16 | CVE-2018-17103 | Cross-Site Request Forgery (CSRF) vulnerability in Get-Simple Getsimple CMS 3.3.13 An issue was discovered in GetSimple CMS v3.3.13. | 8.8 |
2018-09-16 | CVE-2018-17102 | Cross-Site Request Forgery (CSRF) vulnerability in Quickappscms Quickapps CMS An issue was discovered in QuickAppsCMS (aka QACMS) through 2.0.0-beta2. | 8.8 |
2018-09-15 | CVE-2018-17070 | Cross-Site Request Forgery (CSRF) vulnerability in Unlcms 7.59 An issue was discovered in UNL-CMS 7.59. | 6.5 |
2018-09-15 | CVE-2018-17069 | Cross-Site Request Forgery (CSRF) vulnerability in Unlcms 7.59 An issue was discovered in UNL-CMS 7.59. | 6.5 |
2018-09-14 | CVE-2018-17045 | Cross-Site Request Forgery (CSRF) vulnerability in CMS Maelostore Project CMS Maelostore 1.5.0 An issue was discovered in CMS MaeloStore V.1.5.0. | 8.8 |
2018-09-13 | CVE-2018-17023 | Cross-Site Request Forgery (CSRF) vulnerability in Asus Gt-Ac5300 Firmware Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384_32738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to start_apply.htm. | 8.8 |
2018-09-12 | CVE-2018-16951 | Cross-Site Request Forgery (CSRF) vulnerability in Xunfeng Project Xunfeng 0.2.0 xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832. | 8.0 |
2018-09-11 | CVE-2018-16832 | Cross-Site Request Forgery (CSRF) vulnerability in Xunfeng Project Xunfeng 0.2.0 CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header. | 6.5 |
2018-09-10 | CVE-2016-7067 | Cross-Site Request Forgery (CSRF) vulnerability in Mmonit Monit Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. | 6.5 |