Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 06:42:28 +0000 cnvd-2015-03369 https://cve.radiocsirt.org/vuln/cnvd-2015-03369 cnvd-2015-03369 https://cve.radiocsirt.org/vuln/cnvd-2015-03369 EUVD-2026-113668 https://cve.radiocsirt.org/vuln/euvd-2026-113668 EUVD-2026-113668 https://cve.radiocsirt.org/vuln/euvd-2026-113668 fkie_cve-2012-6691 https://cve.radiocsirt.org/vuln/fkie_cve-2012-6691 <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the (1) status parameter to admin/stats_monthly_sales.php or (2) country parameter in a process action to admin/create_account_process.php.</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the (1) status parameter to admin/stats_monthly_sales.php or (2) country parameter in a process action to admin/create_account_process.php.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-6691 GHSA-g56j-5qqv-7cxw https://cve.radiocsirt.org/vuln/ghsa-g56j-5qqv-7cxw <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the (1) status parameter to admin/stats_monthly_sales.php or (2) country parameter in a process action to admin/create_account_process.php.</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the (1) status parameter to admin/stats_monthly_sales.php or (2) country parameter in a process action to admin/create_account_process.php.</p> https://cve.radiocsirt.org/vuln/ghsa-g56j-5qqv-7cxw gsd-2012-6691 https://cve.radiocsirt.org/vuln/gsd-2012-6691 gsd-2012-6691 https://cve.radiocsirt.org/vuln/gsd-2012-6691