Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Ms Topsites Component: Ms Topsites Clear all filters
TI-2007-05657 CVE-2007-5918 · GHSA-hm64-99f5-q8f6

Cross-site request forgery (CSRF) vulnerability in edit.php in the MS TopSites add-on for…

Priority LOW 28

Cross-site request forgery (CSRF) vulnerability in edit.php in the MS TopSites add-on for PHP-Nuke does not verify that the uname parameter matches the current account, which allows remote authenticated users to change a…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00784 Published 2007-11-10 No fix listed CWE-352