Lucene search
China National Vulnerability DatabaseCNVD-2022-80686HistoryNov 21, 2022 - 12:00 a.m.
Doufox Cross-Site Request Forgery Vulnerability
2022-11-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
doufox cms
cross-site request forgery
vulnerability
php
mysql
web application
validation
trusted user
system administrator
0.001 Low
EPSS
Percentile
43.6%
Doufox is an open source PHP and MySQL-based powerful CMS website builder. version 0.0.4 of Doufox is vulnerable to cross-site request forgery, which stems from a WEB application that does not sufficiently validate that the request is from a trusted user. An attacker could use this vulnerability to add a system administrator account.
| CPE | Name | Operator | Version |
|---|---|---|---|
| doufox doufox | eq | 0.0.4 |
Related
nvd
nvd
CVE-2022-42246
2022-11-17 04:15:11
cvelist
cvelist
CVE-2022-42246
2022-11-17 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-11-17 04:15:00
cve
cve
CVE-2022-42246
2022-11-17 04:15:11