Skip to content
OpenAdvisories

Product · bylancer

Zechat

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2018-25334

    Zechat 1.5 Cross-Site Request Forgery (CSRF) via hashtag parameter

    Zechat 1.5 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an enco…

    bylancer Zechat