Cross site request forgery (csrf)

2022-07-0613:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.2%

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members’ account numbers.

CPENameOperatorVersion
pescms_teameq2.3.3

CPE	Name	Operator	Version
	pescms_team	eq	2.3.3

References

github.com/lazyphp/PESCMS-TEAM/issues/7

github.com/RO6OTXX/pescms_vulnerability

github.com/two-kisses/pescms_vulnerability