//
sign in
Post
by @danabra.mov
PostEmbed
by @danabra.mov
Record
by @jimpick.com
Record
by @atsui.org
+ new component
Post
CVE-2026-55741 - Cotonti CSRF in admin.config.php allows unauthorized configuration changes CVE ID : CVE-2026-55741 Published : June 18, 2026, 6:04 a.m. | 1 hour, 38 minutes ago Description : Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Requ...
6h
Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration configuration handler. In system/admin/admin.config.php, the configuration update action ('a=update') processes POST data via cot_config_update_options() without calling cot_check_xg() to validate the anti-CSRF token (the 'x' parameter), unlike other admin handlers (e.g. admin.structure.php, admin.cache.php). A remote attacker …
cvefeed.io
CVE-2026-55741 - Cotonti CSRF in admin.config.php allows unauthorized configuration changes
CVE Alerts