Vulnerabilities (CVE)

Filtered by CWE-352
Total 8867 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-42630 1 Frogcms Project 1 Frogcms 2024-08-13 N/A 8.8 HIGH
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file.
CVE-2024-42626 1 Frogcms Project 1 Frogcms 2024-08-13 N/A 8.8 HIGH
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add.
CVE-2024-32863 1 Johnsoncontrols 1 Exacqvision Web Service 2024-08-09 N/A 8.8 HIGH
Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF)
CVE-2024-7360 1 Oretnom23 1 Tracking Monitoring Management System 2024-08-09 5.0 MEDIUM 8.8 HIGH
A vulnerability classified as problematic has been found in SourceCodester Tracking Monitoring Management System 1.0. This affects an unknown part of the file /ajax.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273339.
CVE-2024-7367 1 Oretnom23 1 Simple Realtime Quiz System 2024-08-09 5.0 MEDIUM 8.8 HIGH
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Realtime Quiz System 1.0. This affects an unknown part of the file /ajax.php?action=save_user. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273351.
CVE-2024-7460 1 Siamonhasan 1 Warehouse Inventory System 2024-08-06 5.0 MEDIUM 8.8 HIGH
A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change_password.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273553 was assigned to this vulnerability.
CVE-2024-7459 1 Siamonhasan 1 Warehouse Inventory System 2024-08-06 5.0 MEDIUM 8.8 HIGH
A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected is an unknown function of the file /edit_account.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273552.