Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to hijack the authentication of users for requests that (1) upload image files, (2) delete image files, or (3) create blocks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pulse CMS 'view.php'页面跨站请求伪造漏洞
Vulnerability Description
Pulse是一个Web应用程序开发框架和门户网站搭建解决方案。 Pulse CMS存在多个跨站请求伪造漏洞。由于没有执行充分的有效性检查便允许用户通过HTTP请求执行某些操作，如果已登录用户访问了恶意网站就会允许远程攻击者劫持用户的认证，代表该用户执行上传图形或删除文件或创建块等请求。
CVSS Information
N/A
Vulnerability Type
N/A