CVE-2024-42764

CRITICAL Year: 2024
CVSS v3 Score
9.4
Critical
Weakness Type
CWE-352
View all →

Vulnerability Description

Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php.

Related Vulnerabilities

CVE-2024-50966

CRITICAL
CVSS:9.3(Critical)

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin.

CWE-3522024

CVE-2025-30528

CRITICAL
CVSS:9.3(Critical)

Cross-Site Request Forgery (CSRF) vulnerability in wpshopee Awesome Logos allows SQL Injection. This issue affects Awesome Logos: from n/a through 1.2.

CWE-3522025

CVE-2016-6637

CRITICAL
CVSS:9.6(Critical)

Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x ...

CWE-3522016

CVE-2019-10784

CRITICAL
CVSS:9.6(Critical)

phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, "database.php" does not verify the source of an H...

CWE-3522019

CVE-2020-12076

CRITICAL
CVSS:9.6(Critical)

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS.

CWE-3522020

CVE-2020-6167

CRITICAL
CVSS:9.6(Critical)

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify several important settings, or include remote f...

CWE-3522020