WordPress MapFig Studio plugin versions 0.2.1 and below suffer from cross site request forgery and cross site scripting vulnerabilities.
bb373228013ea4da17857eacb046e2ed58e688e52aab0abc39365db5b8ba412c
WordPress Light Poll plugin versions 1.0.0 and below suffer from multiple cross site request forgery vulnerabilities.
426a33d39db525b60c4ea22023682e881dcccb43bcd8dfaaa2a6ff1157612ad1
Giftora version 1.0 suffers from a cross site request forgery vulnerability.
7071cbb4889154761d9ae9cf373afbb5f77faa3e9e23cfede27fd5c5a660ad25
Farmacia Gama version 1.0 Farmacia Gama version 1.0 suffers from a cross site request forgery vulnerability.
54c9db8b6277d282699823fdb83ba0f1b4aa2c95b1aa9fef358765f2383e0613
Employees Pay Slip PDF Generator System version 1.0 suffers from a cross site request forgery vulnerability.
2152f0c2adc29a0e29edd4a8aee7099d950ab129ab0cf9dee9ef2e0365f9d0a4
Bakery Shop Management System version 1.0 suffers from a cross site request forgery vulnerability.
3654863058f09649db284f346cf2ee9501e70a9d157f569b64c35ba13742a4d1
Gas Agency Management version 2022 suffers from a cross site request forgery vulnerability.
6a250ada2601bac77bf32e0acac068040df66e276b76551461e99857892cb652
Computer and Mobile Repair Shop Management System version 1.0 suffers from a cross site request forgery vulnerability.
10a29f1a3d4329d2c54a54998a1497a4053a45326c061bbdb1cdf738b8957608
Employee Management System version 1.0 suffers from a cross site request forgery vulnerability.
0807edb2026bb862bdc3ccf77a17d983c00424b86536fe0854d17a6817047594
Yoga Class Registration System version 1.0 suffers from a cross site request forgery vulnerability.
f297b6b68f402ec60abb9645304789ca18f7d02e2fbd9a8818252d86cfc671ff
AccPack Khanepani version 1.0 suffers from a cross site request forgery vulnerability.
52bc25bfe3e1b38b1fc336435e070fb91c14640c03bcd60081118a3a598cfb03
AccPack Cop version 1.0 suffers from a cross site request forgery vulnerability.
9019bcc0149f6bd585eeb57145abd8d8ab36247d7e4f551459497d7ef6a6c872
Aero CMS version 0.0.1 suffers from a cross site request forgery vulnerability.
d177460484605e92448747eb5276d4dbc65842e8466efab16cfdeff8b9e1e531
An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests do not require anti-CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For example, an attack could deliver a worrisome printout to an end user.
b7785d8c05a1d7473dea688d8071986f96d4de3f7e475adfd7705ee49de89ef0
An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection.
1b4dfe24cfa2bbe9c0737b6cd595fc715eaa981c261cfb0dec4dc1161934e692
AccPack Buzz Cop version 1.0 suffers from a cross site request forgery vulnerability.
dc23004e940aed6e3dfaad992d17e70088478a86a99608f63b3822fa94af6189
XenForo versions 2.2.15 and below suffer from a cross site request forgery vulnerability in Widget::actionSave.
a2e0e2c93fd20ac00f325a1d77c282bae74c903affae30dd55518d5333641874
WordPress PZ Frontend Manager plugin versions 1.0.5 and below suffer from a cross site request forgery vulnerability in the change user profile picture functionality.
71b1a540c9b3265fc977fa30c1fda5b93cf9333b67a049926eee9138c3fa55c1
Cinema Booking System version 1.0 suffers from remote SQL injection and cross site request forgery vulnerabilities.
17d99c784f15844038509b9dcb7cc2e0afbcdebbac5e213e1d14c2427df6d660
Carbon Forum version 5.9.0 suffers from access control, cross site request forgery, file upload, outdated library, and remote SQL injection vulnerabilities.
cba504421b68519aaed702319b854c39235fc60743041d75670a496471266424
Paradox IP150 Internet Module version 1.40.00 suffers from a cross site request forgery vulnerability.
9e102cbe93f6192c8caedc9ff1e998a3150ce7386317dc22ddbf5e4b3f736fbf
Panel.SmokeLoader malware suffers from cross site request forgery, and cross site scripting vulnerabilities.
ef278eac34255b166212b8c3d391b9134c5e614f5beadcfc77d5664154f0a7de
SOPlanning version 1.52.00 suffers from a cross site request forgery vulnerability in xajax_server.php.
a3c73b7d4acc8e32c7247c327692a33f62025c56af9edaa24b5dfff34103fc5a
Red Hat Security Advisory 2024-0692-03 - An update is now available for Red Hat OpenShift GitOps v1.10.2. Issues addressed include cross site request forgery, denial of service, and traversal vulnerabilities.
57186fb201c2a67b6d9e056c94b357cf2ab5c8553dea6f5ead3a46074c62785d
Red Hat Security Advisory 2024-0691-03 - An update is now available for Red Hat OpenShift GitOps v1.9.4. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link in the References section. Issues addressed include cross site request forgery, denial of service, and traversal vulnerabilities.
82af22a6e38cb506d44fc04c2626a1c0992c314db7225f5d4421a07d6b467ab6