Ivano Binetti

Várias vulnerabilidades de falsificação de solicitação entre sites (CSRF) e de script entre sites (XSS) permitem que invasores remotos se apropriem da autenticação de administradores para realizar solicitações. Isso pode ser feito por meio de vários parâmetros em diferentes arquivos PHP, incluindo `page title` em “admin/content pages edit.php”, `category name[]` em “admin/products category.php” e vários parâmetros em “admin/settings siteinfo.php”, “admin/settings company.php” e “admin/settings email.php”.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a "save user" action.

A cross-site request forgery (CSRF) issue exists, allowing remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout.

The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific requests. The affected requests include enabling or disabling Wireless MAC Address Filters via a `wlFltMode` action to "wlmacflt.cmd", enabling or disabling firewall protections via a request to "scdmz.cmd", and enabling or disabling remote management via a `save` action to "scsrvcntr.cmd".

A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that delete arbitrary web pages via a `showcats` action in the `admin/index.php` file.

The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific requests. The requests in question are those that add administrator accounts via a "member new" action to "my admin/admin1 members.php" or modify the default site title via a "save" action to "my admin/admin1 configuration.php".

A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via the `sysPassword` parameter.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action.

The issue allows remote attackers to hijack user authentication for requests that change account settings via a request to "index.php/profile-edit-save" or hijack administrator authentication for requests that add a new page via a request to "admin/pages-new-save".

A cross-site request forgery (CSRF) issue exists, allowing remote attackers to hijack administrator authentication for requests that change the router passphrase via the `pskValue` parameter in the goform/admin/formWlEncrypt endpoint.

The issue is related to the `wp create nonce` function, which associates a nonce with a user account instead of a user session. This might make it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks on specific actions and objects by sniffing the network. Attacks can be demonstrated against the "wp-admin/admin-ajax.php" and "wp-admin/user-new.php" scripts. The vendor reportedly disputes the significance of this issue, stating that `wp create nonce` operates as intended.

The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote authenticated users to inject arbitrary web script or HTML via the `email` parameter in an edit user configuration action.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the `email` parameter in the Edit User template. This is due to a vulnerability in the admin/edituser.php file.

The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting (XSS) attacks. This can be achieved via the `u email` parameter (also known as the Authors Email field) or the `u realname` parameter (also known as the Authors Name field) in the manager/users.php file, or through the `c author` parameter (also known as the Author field) in an ADD A COMMENT section.

A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via the `TR title` parameter in an edit action.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the "user/logout" URI. The vendor disputes the significance of this issue, considering the security benefit against platform complexity and performance impact, and concludes that a change to the logout behavior is not planned because for most sites it is not worth the trade-off.

The issue allows remote attackers to hijack the authentication of administrators for requests. This can be done through "admin/users/add" or "admin/pages/edit/web page name" API endpoints. Specifically, the attack can add an administrator via an `add` action or modify a web page via a `save` action.

The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to perform unauthorized actions such as deleting users, news, or newsletters. This is achieved through multiple cross-site request forgery (CSRF) vulnerabilities in the main.php file.