Vulnerabilities (CVE)

Filtered by vendor Unlcms Subscribe
Filtered by product Unlcms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-17070 1 Unlcms 1 Unlcms 2023-12-10 4.3 MEDIUM 6.5 MEDIUM
An issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q=admin%2Fconfig%2Fsystem%2Fsite-information&render=overlay&render=overlay.
CVE-2018-17069 1 Unlcms 1 Unlcms 2023-12-10 4.3 MEDIUM 6.5 MEDIUM
An issue was discovered in UNL-CMS 7.59. A CSRF attack can create new content via ?q=node%2Fadd%2Farticle&render=overlay&render=overlay.