Description
Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the members[] parameter, related to CVE-2014-3810.
Remediation
References
Related Vulnerabilities
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9418)
Joomla! Core 1.5.x Multiple SQL Injection Vulnerabilities (1.5.0 - 1.5.21)
WordPress Plugin WP Statistics Multiple Vulnerabilities (13.1.5)
MySQL CVE-2023-22005 Vulnerability (CVE-2023-22005)
WordPress Plugin Happy Addons for Elementor Cross-Site Scripting (2.23.0)