Vulnerabilities > Cross-Site Request Forgery (CSRF)

DATE CVE VULNERABILITY TITLE RISK
2018-04-19 CVE-2018-0259 Cross-Site Request Forgery (CSRF) vulnerability in Cisco Mate Collector 7.1
A vulnerability in the web-based management interface of Cisco MATE Collector could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device.
network
low complexity
cisco CWE-352
8.8
8.8
2018-04-19 CVE-2018-0255 Cross-Site Request Forgery (CSRF) vulnerability in Cisco IOS 15.2(5)E
A vulnerability in the device manager web interface of Cisco Industrial Ethernet Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of an affected system.
network
low complexity
cisco CWE-352
8.8
8.8
2018-04-19 CVE-2018-10188 Cross-Site Request Forgery (CSRF) vulnerability in PHPmyadmin 4.8.0
phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php.
network
low complexity
phpmyadmin CWE-352
8.8
8.8
2018-04-19 CVE-2018-10224 Cross-Site Request Forgery (CSRF) vulnerability in Yzmcms 3.8
An issue was discovered in YzmCMS 3.8.
network
low complexity
yzmcms CWE-352
6.8
6.8
2018-04-19 CVE-2018-10223 Cross-Site Request Forgery (CSRF) vulnerability in Yzmcms 3.8
An issue was discovered in YzmCMS 3.8.
network
low complexity
yzmcms CWE-352
6.8
6.8
2018-04-19 CVE-2018-10222 Cross-Site Request Forgery (CSRF) vulnerability in Icmsdev Icms 7.0
An issue was discovered in idreamsoft iCMS V7.0.
network
low complexity
icmsdev CWE-352
8.8
8.8
2018-04-17 CVE-2018-10185 Cross-Site Request Forgery (CSRF) vulnerability in Tuzicms 2.0.6
An issue was discovered in TuziCMS v2.0.6.
network
low complexity
tuzicms CWE-352
8.8
8.8
2018-04-16 CVE-2018-10137 Cross-Site Request Forgery (CSRF) vulnerability in Iscripts Uberforx 2.2
iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI.
network
low complexity
iscripts CWE-352
8.8
8.8
2018-04-16 CVE-2018-10132 Cross-Site Request Forgery (CSRF) vulnerability in Pbootcms 0.9.8
PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request, resulting in PHP code injection in the recontent parameter.
network
low complexity
pbootcms CWE-352
8.8
8.8
2018-04-16 CVE-2018-10127 Cross-Site Request Forgery (CSRF) vulnerability in Xyhcms Project Xyhcms 3.5
An issue was discovered in XYHCMS 3.5.
network
low complexity
xyhcms-project CWE-352
8.8
8.8