CVE-2021-34167

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote attackers to gain escalated privileges via taocms/admin/admin.php.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Feb 24, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-34174.9An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity Administrator (LXCA), ifCVE-2021-341709.8Bandai Namco FromSoftware Dark Souls III allows remote attackers to execute arbitrary code.CVE-2021-341737.5An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame.CVE-2021-341744.6A vulnerability exists in Broadcom BCM4352 and BCM43684 chips. Any wireless router using BCM4352 and BCM43684 will be affected, such as ASUSCVE-2021-34186.4If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validatiCVE-2021-341815.4Cross Site Scripting (XSS) vulnerability in TomExam 3.0 via p_name parameter to list.thtml.CVE-2021-341829.8An issue in ttyd v.1.6.3 allows attacker to execute arbitrary code via default configuration permissions.CVE-2021-341849.8Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in ma_default_vfs_close__stdio in miniaudio.h.CVE-2021-341857.8Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwav_bytes_to_u32 in miniaudio.hCVE-2021-341879.8main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter.CVE-2021-341904.8A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitCVE-2021-341937.5Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs.