CVE-2024-7065

A vulnerability was found in Spina CMS up to 2.18.0. It has been classified as problematic. Affected is an unknown function of the file /admin/pages/. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272346 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-352

• https://github.com/topsky979/Security-Collections/blob/main/1700810/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.272346Permissions Required
• https://vuldb.com/?id.272346Third Party Advisory
• https://vuldb.com/?submit.375236Third Party Advisory
• https://github.com/topsky979/Security-Collections/blob/main/1700810/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.272346Permissions Required
• https://vuldb.com/?id.272346Third Party Advisory
• https://vuldb.com/?submit.375236Third Party Advisory

Published

Jul 24, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7059A high-severity vulnerability that can lead to arbitrary cod…8.9
• CVE-2024-7060An information disclosure vulnerability in GitLab CE/EE in p…6.5
• CVE-2024-7061Okta Verify for Windows is vulnerable to privilege escalatio…7.8
• CVE-2024-7062Nimble Commander suffers from a privilege escalation vulnera…7.8
• CVE-2024-7063The ElementsKit Pro plugin for WordPress is vulnerable to Se…4.3
• CVE-2024-7064The ElementsKit Pro plugin for WordPress is vulnerable to St…5.4
• CVE-2024-7066A vulnerability was found in F-logic DataCube3 1.0. It has b…9.8
• CVE-2024-7067A vulnerability was found in kirilkirkov Ecommerce-Laravel-B…8.8
• CVE-2024-7068A vulnerability classified as problematic has been found in …4.6
• CVE-2024-7069A vulnerability, which was classified as critical, has been …7.5
• CVE-2024-7071Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2024-7073A server-side request forgery (SSRF) vulnerability exists in…6.5