CWE-352

▾ Twilightsimple_food_website_project · simple_food_websiteEPSS 0.55%via NVD

Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF) which allows anyone to takeover admin/moderater account.

CVE-2022-25523High· 8.8

▾ Twilighttypesettercms · typesetterEPSS 0.55%via NVD

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is exploited via a crafted POST request.

CVE-2022-23349High· 8.8

▾ Twilightbigantsoft · bigant_serverEPSS 0.65%via NVD

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).

CVE-2020-18326High· 8.8PoC

▾ Midnightintelliants · subrion_cmsEPSS 2.2%via NVD

Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfull…

Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfull…

CVE-2021-44227High· 8.0

▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream EUS (v. 8.2)EPSS 0.76%via CSAF

mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover (CVE-2021-44227)

A Cross-Site Request Forgery (CSRF) attack can be performed in mailman due to a CSRF token bypass. CSRF tokens are not checked against the right type of user when performing admin operations and a token created by a regular user can be use…

CVE-2020-19964Medium· 6.5

▾ Sunlitphpmywind · phpmywindEPSS 0.52%via NVD

A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication.

CVE-2020-20586Medium· 4.5

▾ Sunlitxyhcms · xyhcmsEPSS 0.39%via NVD

A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password.

A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password.

CVE-2021-31659High· 8.8

▾ Twilighttp-link · tl-sg2005_firmwareEPSS 0.56%via NVD

TP-Link TL-SG2005, TL-SG2008, etc

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token authentication information. A maliciou…

CVE-2020-21884High· 8.8

▾ Twilightindionetworks · unibox_u50_firmwareEPSS 1.2%via NVD

Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF) vulnerability in /tools/network-trace, /list_users, /list_byod?usertype=raduser, /dhcp_leases, /go?rid=202 in which …

Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF) vulnerability in /tools/network-trace, /list_users, /list_byod?usertype=raduser, /dhcp_leases, /go?rid=202 in which …

CVE-2021-26215Medium· 4.3

▾ Sunlitseeddms · seeddmsEPSS 0.49%via NVD

SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditDocument.php.

CVE-2021-26216Medium· 4.3

▾ Sunlitseeddms · seeddmsEPSS 0.49%via NVD

SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditFolder.php.

CVE-2020-27574High· 8.8

▾ Twilightmaxum · rumpusEPSS 0.76%via NVD

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF)

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user.

CVE-2020-35273High· 8.0

▾ Twilightegavilanmedia · user_registration_&_login_system_with_admin_panelEPSS 0.57%via NVD

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.

CVE-2020-28858High· 8.8

▾ Twilightopenasset · digital_asset_managementEPSS 1.1%via NVD

OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forgery attacks on all user functions.

OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forgery attacks on all user functions.

CVE-2020-23451High· 8.8

▾ Twilightspiceworks · spiceworksEPSS 0.59%via NVD

Spiceworks Version <= 7.5.00107 is affected by CSRF which can lead to privilege escalation via "/settings/v1/users" function.

CVE-2020-15711High· 8.8

▾ Twilightmisp-project · mispEPSS 0.49%via NVD

In MISP before 2.4.129, setting a favourite homepage was not CSRF protected.

CVE-2020-1103Medium· 6.5

▾ Sunlitmicrosoft · sharepoint_enterprise_serverEPSS 2.4%via NVD

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF). When users are simultan…

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF). When users are simultan…

CVE-2019-13529High· 8.8PoC