Lucene search
HistoryOct 30, 2023 - 10:15 p.m.
CVE-2023-42323
cve
2023
42323
cross site request forgery
csrf
douhaocms
nvd
vulnerability
remote attacker
arbitrary code
adminaction.class.php
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.9 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.2%
Cross Site Request Forgery (CSRF) vulnerability in DouHaocms v.3.3 allows a remote attacker to execute arbitrary code via the adminAction.class.php file.
Affected configurations
Node
mnbvcxz131421douhaocmsMatch3.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| mnbvcxz131421:douhaocms | mnbvcxz131421 douhaocms | eq | 3.3 |
Related
nvd
nvd
CVE-2023-42323
2023-10-30 22:15:10
prion
prion
Cross site request forgery (csrf)
2023-10-30 22:15:00
cvelist
cvelist
CVE-2023-42323
2023-10-30 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.9 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.2%
Related for CVE-2023-42323