Skip to content
OpenAdvisories

Archive

27 June 2017

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2017-6086 Public exploit

    ViMbAdmin CSRF Vulnerabilities

    Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an administrator user via a crafted POST request …