3 matches found
CVE-2019-14347
Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users editor or developer to create an administrator account via admin/user/add, as demonstrated by a Python PoC script...
CVE-2019-14346
Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password...
Cross site request forgery (csrf)
Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password...