Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Diafan Component: Diafan.cms Clear all filters
TI-2011-04590 CVE-2011-5318 · GHSA-7wgh-f3wv-prq6

Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow…

Priority LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify articles via a save_post action to ad…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0106 Published 2015-01-01 No fix listed CWE-352