#cwe-352

共收录 791 条相关情报。

漏洞预警2026-10-01 发布INFO

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code...

CVE-2026-64947

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-434

漏洞预警2026-10-01 发布INFO

A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-Site Scripting, enabling session cookie exfiltration and administrat...

CVE-2026-64946

A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-Site Script

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-352

漏洞预警2026-10-01 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visit...

CVE-2026-34190

Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of alert commands via sequential, unvalidat

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-01 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious p...

CVE-2026-34189

Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of event responses via a forged GET request

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-01 发布INFO

The Featured Image from URL (FIFU) WordPress plugin before 6.0.8, Featured Image from URL (FIFU) Premium WordPress plugin before 8.2.8 do not correctly enforce the REST API nonc...

CVE-2026-101147

The Featured Image from URL (FIFU) WordPress plugin before 6.0.8, Featured Image from URL (FIFU) Premium WordPress plugi

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-29 发布INFO

Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted ...

CVE-2026-95362

Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging soci

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-29 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remo...

CVE-2026-73597

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (C

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-29 发布INFO

Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically s...

CVE-2026-41875

Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special websi

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

安全公告2026-09-29 发布INFO

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that...

CVE-2026-101093

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to de

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:medium

漏洞预警2026-09-28 发布INFO

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verification. Attackers ca...

CVE-2026-101093

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to de

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-28 发布INFO

Cross-Site Request Forgery (CSRF) in Apache Roller 6.1.5 allows a remote attacker to cause a logged-in user to perform state-changing actions under the victim's authority, becau...

CVE-2026-82380

Cross-Site Request Forgery (CSRF) in Apache Roller 6.1.5 allows a remote attacker to cause a logged-in user to perform s

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

安全公告2026-09-28 发布INFO

Apache Roller: CSRF protection bypass via self-generated salt validation

CVE-2026-82380

Cross-Site Request Forgery (CSRF) in Apache Roller 6.1.5 allows a remote attacker to cause a logged-in user to perform s

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-352

安全公告2026-09-27 发布INFO

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to...

CVE-2026-100873

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:low

漏洞预警2026-09-27 发布INFO

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function. The manipula...

CVE-2026-100873

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-862

安全公告2026-09-27 发布INFO

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due...

CVE-2026-100747

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF toke

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:medium

安全公告2026-09-27 发布INFO

Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0

CVE-2026-100748

Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:medium

安全公告2026-09-27 发布INFO

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6...

CVE-2026-100749

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned fi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:medium

漏洞预警2026-09-27 发布INFO

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days...

CVE-2026-100749

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-27 发布INFO

Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0

CVE-2026-100748

Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-27 发布INFO

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event ...

CVE-2026-100747

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF toke

历史摘要 · 未重新核验 · NVD

#cve #cwe-352