Cross-Site Request Forgery

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password.CVE-2022-30898Chshcms · 0.6% likely

   CWE-352

2. \upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.CVE-2018-16732Chshcms · 0.5% likely

   CWE-352

3. An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds.CVE-2019-9598Chshcms · 0.5% likely

   CWE-352

4. Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and cr…CVE-2018-16448Chshcms · 0.5% likely

   CWE-352

5. Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links.CVE-2019-6779Chshcms · 0.5% likely

   CWE-352

6. An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website's basic configuration via upload/admin.php/setting/save.CVE-2018-16337Chshcms · 0.4% likely

   CWE-352

7. mccms v2.6.3 is vulnerable to Cross Site Request Forgery (CSRF).CVE-2023-29815Chshcms · CVSS 8.8 · 0.3% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.