Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Simple Php Agenda Project Subscribe
Filtered by product Simple Php Agenda
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-1978 1 Simple Php Agenda Project 1 Simple Php Agenda 2015-07-27 6.8 MEDIUM N/A
Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator via a request to auth/process.php, (2) delete an administrator via a request to auth/admin/adminprocess.php, (3) add an event via a request to engine/new_event.php, or (4) delete an event via a request to phpagenda/.