https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:56:47.674629+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2011-5318 fkie_cve-2011-5318 2026-09-29T19:56:47.693996+00:00

Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify articles via a save_post action to admin/news/saveNEWS_ID/, (2) modify settings via a save_post action to admin/site/save2/, or (3) modify credentials via a save_post action to admin/usersite/save2/.

 https://db.gcve.eu/vuln/ghsa-7wgh-f3wv-prq6 GHSA-7wgh-f3wv-prq6 2026-09-29T19:56:47.694051+00:00

Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify articles via a save_post action to admin/news/saveNEWS_ID/, (2) modify settings via a save_post action to admin/site/save2/, or (3) modify credentials via a save_post action to admin/usersite/save2/.

 https://db.gcve.eu/vuln/gsd-2011-5318 gsd-2011-5318 2026-09-29T19:56:47.694070+00:00 gsd-2011-5318