Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2023-6671

Disclosure Date: December 11, 2023 (last updated December 14, 2023)
A vulnerability has been discovered on OJS, that consists in a CSRF (Cross-Site Request Forgery) attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated.
Attacker Value
Unknown

CVE-2004-0261

Disclosure Date: November 23, 2004 (last updated February 22, 2025)
oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.
0