Vulnerabilities > Cross-Site Request Forgery (CSRF)

DATE CVE VULNERABILITY TITLE RISK
2018-09-18 CVE-2018-16952 Cross-Site Request Forgery (CSRF) vulnerability in Oracle Webcenter Interaction 10.3.3
The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design.
network
oracle CWE-352
6.8
2018-09-16 CVE-2018-17104 Cross-Site Request Forgery (CSRF) vulnerability in Microweber 1.0.7
An issue was discovered in Microweber 1.0.7.
6.8
2018-09-16 CVE-2018-17103 Cross-Site Request Forgery (CSRF) vulnerability in Get-Simple Getsimple CMS 3.3.13
An issue was discovered in GetSimple CMS v3.3.13.
network
low complexity
get-simple CWE-352
8.8
2018-09-16 CVE-2018-17102 Cross-Site Request Forgery (CSRF) vulnerability in Quickappscms Quickapps CMS
An issue was discovered in QuickAppsCMS (aka QACMS) through 2.0.0-beta2.
6.8
2018-09-15 CVE-2018-17070 Cross-Site Request Forgery (CSRF) vulnerability in Unlcms 7.59
An issue was discovered in UNL-CMS 7.59.
network
unlcms CWE-352
4.3
2018-09-15 CVE-2018-17069 Cross-Site Request Forgery (CSRF) vulnerability in Unlcms 7.59
An issue was discovered in UNL-CMS 7.59.
network
unlcms CWE-352
4.3
2018-09-14 CVE-2018-17045 Cross-Site Request Forgery (CSRF) vulnerability in CMS Maelostore Project CMS Maelostore 1.5.0
An issue was discovered in CMS MaeloStore V.1.5.0.
6.8
2018-09-13 CVE-2018-17023 Cross-Site Request Forgery (CSRF) vulnerability in Asus Gt-Ac5300 Firmware
Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384_32738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to start_apply.htm.
network
asus CWE-352
6.8
2018-09-12 CVE-2018-16951 Cross-Site Request Forgery (CSRF) vulnerability in Xunfeng Project Xunfeng 0.2.0
xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832.
6.0
2018-09-11 CVE-2018-16832 Cross-Site Request Forgery (CSRF) vulnerability in Xunfeng Project Xunfeng 0.2.0
CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header.
4.3