CVE-2018-7216

Cross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenticated users to hijack the authentication of application users for requests that modify their personal data by leveraging lack of anti-CSRF tokens.

• CWE-352

• http://seclists.org/fulldisclosure/2018/Feb/44Exploit, Mailing List, Third Party Advisory
• https://packetstormsecurity.com/files/146409/Tejari-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44256/Exploit, Third Party Advisory, VDB Entry
• https://www.securityfocus.com/archive/1/541782/30/0/threadedThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Feb/44Exploit, Mailing List, Third Party Advisory
• https://packetstormsecurity.com/files/146409/Tejari-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44256/Exploit, Third Party Advisory, VDB Entry
• https://www.securityfocus.com/archive/1/541782/30/0/threadedThird Party Advisory, VDB Entry

Published

Feb 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7208In the coff_pointerize_aux function in coffgen.c in the Bina…
• CVE-2018-7209An issue was discovered in iDashboards 9.6b. It allows remot…
• CVE-2018-7210An issue was discovered in iDashboards 9.6b. It allows remot…
• CVE-2018-7211An issue was discovered in iDashboards 9.6b. The SSO impleme…
• CVE-2018-7212An issue was discovered in rack-protection/lib/rack/protecti…
• CVE-2018-7213The Password Manager Extension in Abine Blur 7.8.242* before…
• CVE-2018-7217In Bravo Tejari Procurement Portal, uploaded files are not p…
• CVE-2018-7218The AppFirewall functionality in Citrix NetScaler Applicatio…
• CVE-2018-7219application/admin/controller/Admin.php in NoneCms 1.3.0 has …
• CVE-2018-7225An issue was discovered in LibVNCServer through 0.9.11. rfbP…
• CVE-2018-7226An issue was discovered in vcSetXCutTextProc() in VNConsole.…
• CVE-2018-7227A vulnerability exists in Schneider Electric's Pelco Sarix P…5.3