2 results (0.005 seconds)

CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-6779

https://notcve.org/view.php?id=CVE-2019-6779

Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links. La versión 4.1.8 de Cscms permite Cross-Site Request Forgery (CSRF) en admin.php/links/save para añadir, modificar o eliminar enlaces de amigo. • https://github.com/chshcms/cscms/issues/3 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-16337

https://notcve.org/view.php?id=CVE-2018-16337

An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website's basic configuration via upload/admin.php/setting/save. Se ha descubierto un problema en Cscms V4.1.8. Hay una vulnerabilidad Cross-Site Request Forgery (CSRF) que puede modificar la configuración básica de un sitio web mediante upload/admin.php/setting/save. • https://github.com/chshcms/cscms/issues/2 • CWE-352: Cross-Site Request Forgery (CSRF) •