https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:35:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-13236 EUVD-2026-13236 https://cve.radiocsirt.org/vuln/euvd-2026-13236 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21179 <p>Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin &#39;Mail Magazine Management Plugin&#39; ver4.0.0 to 4.1.1 (for EC-CUBE 4 series) and ver1.0.0 to 1.0.4 (for EC-CUBE 3 series) allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted page, and Mail Magazine Templates and/or transmitted history information may be deleted unintendedly.</p> <p>Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin &#39;Mail Magazine Management Plugin&#39; ver4.0.0 to 4.1.1 (for EC-CUBE 4 series) and ver1.0.0 to 1.0.4 (for EC-CUBE 3 series) allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted page, and Mail Magazine Templates and/or transmitted history information may be deleted unintendedly.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-21179 https://cve.radiocsirt.org/vuln/ghsa-qjhc-3x8q-q3vv <p>Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin &#39;Mail Magazine Management Plugin&#39; ver4.0.0 to 4.1.1 (for EC-CUBE 4 series) and ver1.0.0 to 1.0.4 (for EC-CUBE 3 series) allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted page, and Mail Magazine Templates and/or transmitted history information may be deleted unintendedly.</p> <p>Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin &#39;Mail Magazine Management Plugin&#39; ver4.0.0 to 4.1.1 (for EC-CUBE 4 series) and ver1.0.0 to 1.0.4 (for EC-CUBE 3 series) allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted page, and Mail Magazine Templates and/or transmitted history information may be deleted unintendedly.</p> https://cve.radiocsirt.org/vuln/ghsa-qjhc-3x8q-q3vv https://cve.radiocsirt.org/vuln/gsd-2022-21179 gsd-2022-21179 https://cve.radiocsirt.org/vuln/gsd-2022-21179 https://cve.radiocsirt.org/vuln/jvndb-2022-000013 <p>EC-CUBE plugin &#34;Mail Magazine Management Plugin&#34; provided by EC-CUBE CO.,LTD. contains a cross-site request forgery vulnerability (CWE-352). Kenta Yamamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>EC-CUBE plugin &#34;Mail Magazine Management Plugin&#34; provided by EC-CUBE CO.,LTD. contains a cross-site request forgery vulnerability (CWE-352). Kenta Yamamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2022-000013