Vulnerabilities > Cross-Site Request Forgery (CSRF)

DATE CVE VULNERABILITY TITLE RISK
2018-04-12 CVE-2018-6934 Cross-Site Request Forgery (CSRF) vulnerability in Ordermanagementscript Online Tutoring Script 2.0.3
CSRF exists in student/personal-info in PHP Scripts Mall Online Tutoring Script 2.0.3.
network
low complexity
ordermanagementscript CWE-352
8.8
2018-04-12 CVE-2015-0151 Cross-Site Request Forgery (CSRF) vulnerability in Dlink Dir-815 Firmware
Cross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
network
low complexity
dlink CWE-352
8.8
2018-04-11 CVE-2018-10048 Cross-Site Request Forgery (CSRF) vulnerability in Iscripts Eswap 2.4
iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel.
network
low complexity
iscripts CWE-352
8.8
2018-04-11 CVE-2018-10031 Cross-Site Request Forgery (CSRF) vulnerability in Cmsmadesimple CMS Made Simple
CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/moduleinterface.php.
network
low complexity
cmsmadesimple CWE-352
8.8
2018-04-11 CVE-2018-10030 Cross-Site Request Forgery (CSRF) vulnerability in Cmsmadesimple CMS Made Simple
CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/siteprefs.php.
network
low complexity
cmsmadesimple CWE-352
8.8
2018-04-10 CVE-2018-9927 Cross-Site Request Forgery (CSRF) vulnerability in Wuzhicms 4.1.0
An issue was discovered in WUZHI CMS 4.1.0.
network
low complexity
wuzhicms CWE-352
8.8
2018-04-10 CVE-2018-9926 Cross-Site Request Forgery (CSRF) vulnerability in Wuzhicms 4.1.0
An issue was discovered in WUZHI CMS 4.1.0.
network
low complexity
wuzhicms CWE-352
8.8
2018-04-10 CVE-2018-9923 Cross-Site Request Forgery (CSRF) vulnerability in Icmsdev Icms
An issue was discovered in idreamsoft iCMS through 7.0.7.
network
low complexity
icmsdev CWE-352
8.8
2018-04-09 CVE-2018-9856 Cross-Site Request Forgery (CSRF) vulnerability in Kotti Project Kotti
Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via a /admin-document/@@share request.
network
low complexity
kotti-project CWE-352
8.8
2018-04-06 CVE-2014-5072 Cross-Site Request Forgery (CSRF) vulnerability in Wpsecurityauditlog WP Security Audit LOG
Cross-site request forgery (CSRF) vulnerability in WP Security Audit Log plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
network
low complexity
wpsecurityauditlog CWE-352
8.8