CVE-2019-16059: Sapplica Sentrifugo

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page.

Affected products

• Sapplica Sentrifugo: version 3.2 only

Published 2019-09-06. Last modified 2026-06-17.