Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Diafan Subscribe
Filtered by product Diafan.cms
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-5318 1 Diafan 1 Diafan.cms 2015-01-02 6.8 MEDIUM N/A
Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify articles via a save_post action to admin/news/saveNEWS_ID/, (2) modify settings via a save_post action to admin/site/save2/, or (3) modify credentials via a save_post action to admin/usersite/save2/.