Cross site request forgery (csrf)

2020-08-2415:15:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu.

CPENameOperatorVersion
dbhcmseq1.2.0

CPE	Name	Operator	Version
	dbhcms	eq	1.2.0

References

github.com/fragrant10/cve/tree/master/dbhcms1.2.0