CVE-2018-0509

Cross-site request forgery (CSRF) vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors.

• CWE-352

• http://dbit.web.fc2.com/Third Party Advisory
• https://jvn.jp/en/jp/JVN91393903/index.htmlThird Party Advisory, VDB Entry
• http://dbit.web.fc2.com/Third Party Advisory
• https://jvn.jp/en/jp/JVN91393903/index.htmlThird Party Advisory, VDB Entry

Published

Feb 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0503Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 cont…
• CVE-2018-0504Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 cont…
• CVE-2018-0505Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 cont…
• CVE-2018-0506Nootka 1.4.4 and earlier allows remote attackers to execute …
• CVE-2018-0507Untrusted search path vulnerability in FLET'S VIRUS CLEAR Ea…
• CVE-2018-0508Cross-site scripting vulnerability in epg search result view…
• CVE-2018-0510Buffer overflow in epg search result viewer (kkcald) 0.7.19 …
• CVE-2018-0511Cross-site scripting vulnerability in WP Retina 2x prior to …
• CVE-2018-0512Devices with IP address setting tool "MagicalFinder" provide…
• CVE-2018-0513Cross-site scripting vulnerability in MTS Simple Booking C, …
• CVE-2018-0514MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier al…
• CVE-2018-0515Untrusted search path vulnerability in "FLET'S Azukeru Backu…