Lucene search

CVE-2021-30147

🗓️ 07 Apr 2021 03:12:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 97 Views🌐 WEB

DMA Softlab Radius Manager 4.4.0 CSRF vulnerability allows unauthorized account addition

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
Packet Storm	DMA Radius Manager 4.4.0 Cross Site Request Forgery	8 Apr 202100:00	–	packetstorm
Cvelist	CVE-2021-30147	7 Apr 202102:02	–	cvelist
NVD	CVE-2021-30147	7 Apr 202103:15	–	nvd
0day.today	DMA Radius Manager 4.4.0 - Cross-Site Request Forgery Vulnerability	8 Apr 202100:00	–	zdt
UbuntuCve	CVE-2021-30147	7 Apr 202100:00	–	ubuntucve
Prion	Cross site request forgery (csrf)	7 Apr 202103:15	–	prion
Exploit DB	DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF)	8 Apr 202100:00	–	exploitdb

Nvd

Node

dmasoftlab radius_managerMatch4.4.0

Source	Link
github	www.github.com/1d8/publications/tree/main/cve-2021-30147
dmasoftlab	www.dmasoftlab.com/
packetstormsecurity	www.packetstormsecurity.com/files/162136/DMA-Radius-Manager-4.4.0-Cross-Site-Request-Forgery.html

Parameter	Position	Path	Description	CWE
username	request body	/admin.php	DMA Softlab Radius Manager 4.4.0 is vulnerable to CSRF, allowing unauthenticated users to add new manager accounts.	CWE-352
enableuser	request body	/admin.php	DMA Softlab Radius Manager 4.4.0 is vulnerable to CSRF, allowing unauthenticated users to add new manager accounts.	CWE-352
acctype	request body	/admin.php	DMA Softlab Radius Manager 4.4.0 is vulnerable to CSRF, allowing unauthenticated users to add new manager accounts.	CWE-352
password1	request body	/admin.php	DMA Softlab Radius Manager 4.4.0 is vulnerable to CSRF, allowing unauthenticated users to add new manager accounts.	CWE-352
password2	request body	/admin.php	DMA Softlab Radius Manager 4.4.0 is vulnerable to CSRF, allowing unauthenticated users to add new manager accounts.	CWE-352
maccm	request body	/admin.php	DMA Softlab Radius Manager 4.4.0 is vulnerable to CSRF, allowing unauthenticated users to add new manager accounts.	CWE-352
mac	request body	/admin.php	DMA Softlab Radius Manager 4.4.0 is vulnerable to CSRF, allowing unauthenticated users to add new manager accounts.	CWE-352
ipmodecpe	request body	/admin.php	DMA Softlab Radius Manager 4.4.0 is vulnerable to CSRF, allowing unauthenticated users to add new manager accounts.	CWE-352
simuse	request body	/admin.php	DMA Softlab Radius Manager 4.4.0 is vulnerable to CSRF, allowing unauthenticated users to add new manager accounts.	CWE-352
firstname	request body	/admin.php	DMA Softlab Radius Manager 4.4.0 is vulnerable to CSRF, allowing unauthenticated users to add new manager accounts.	CWE-352

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Apr 2021 03:15Current

8.7High risk

Vulners AI Score8.7

CVSS26.8

CVSS38.8

EPSS0.00404

CWE-352