الباحثون
رجوع
Westbrookadmin
#11478
من 60,594
28
إجمالي CVSS
الثغرات
·
4
متوسطة
2
عالية
2
PT-2018-13235
2018-08-25
8.8
CVE-2018-15846
Fledrcms
Fledrcms
An issue was discovered that allows a CSRF vulnerability to change the administrator's password. This can be done via the "index.php?p=done&savedata=1" endpoint.
PT-2018-13236
2018-08-25
6.1
CVE-2018-15847
Puppycms
Puppycms
An issue was discovered in the software, where there is a potential for XSS via the `menu.php` file in the "Add Page/URL" URL link field.
PT-2018-13237
2018-08-25
8.8
CVE-2018-15848
Portfoliocms
Portfoliocms
An issue was discovered that allows CSRF to create new pages. This can be done via the "admin/portfolio.php?newpage=true" endpoint.
PT-2018-13238
2018-08-25
4.3
CVE-2018-15849
Portfoliocms
Portfoliocms
An issue was discovered that allows CSRF to update the website settings via the "admin/aboutus.php" endpoint.