Vulnerabilities > Cross-Site Request Forgery (CSRF)

DATE CVE VULNERABILITY TITLE RISK
2018-08-25 CVE-2018-15850 Cross-Site Request Forgery (CSRF) vulnerability in Redaxo CMS 4.7.2
An issue was discovered in REDAXO CMS 4.7.2.
network
low complexity
redaxo CWE-352
8.8
8.8
2018-08-25 CVE-2018-15849 Cross-Site Request Forgery (CSRF) vulnerability in Portfoliocms Project Portfoliocms 1.0.5
An issue was discovered in portfolioCMS 1.0.5.
network
low complexity
portfoliocms-project CWE-352
4.3
4.3
2018-08-25 CVE-2018-15848 Cross-Site Request Forgery (CSRF) vulnerability in Portfoliocms Project Portfoliocms 1.0.5
An issue was discovered in portfolioCMS 1.0.5.
network
low complexity
portfoliocms-project CWE-352
8.8
8.8
2018-08-25 CVE-2018-15846 Cross-Site Request Forgery (CSRF) vulnerability in Fledrcms Project Fledrcms
An issue was discovered in fledrCMS through 2014-02-03.
network
low complexity
fledrcms-project CWE-352
8.8
8.8
2018-08-25 CVE-2018-15845 Cross-Site Request Forgery (CSRF) vulnerability in Gleezcms Gleez CMS 1.2.0
There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.
network
low complexity
gleezcms CWE-352
8.8
8.8
2018-08-25 CVE-2018-15844 Cross-Site Request Forgery (CSRF) vulnerability in Damicms 6.0.0
An issue was discovered in DamiCMS 6.0.0.
network
low complexity
damicms CWE-352
8.8
8.8
2018-08-24 CVE-2018-11502 Cross-Site Request Forgery (CSRF) vulnerability in Moderator LOG Notes Project Moderator LOG Notes 1.1
An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB.
network
low complexity
moderator-log-notes-project CWE-352
6.5
6.5
2018-08-22 CVE-2018-10884 Cross-Site Request Forgery (CSRF) vulnerability in Redhat Ansible Tower
Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF) in awx/api/authentication.py.
network
low complexity
redhat CWE-352
8.8
8.8
2018-08-20 CVE-2018-15569 Cross-Site Request Forgery (CSRF) vulnerability in Mylittleforum MY Little Forum 2.4.12
my little forum 2.4.12 allows CSRF for deletion of users.
network
low complexity
mylittleforum CWE-352
6.5
6.5
2018-08-20 CVE-2018-15568 Cross-Site Request Forgery (CSRF) vulnerability in Tp5Cms Project Tp5Cms 20170315/20170525
tp5cms through 2017-05-25 has CSRF via admin.php/category/delete.html.
network
low complexity
tp5cms-project CWE-352
8.8
8.8