PT-2019-13625

Name of the Vulnerable Software and Affected Versions Schben Adive version 2.0.7 Description The issue allows for admin/config CSRF, enabling an attacker to change a user's password. This is possible due to a vulnerability in the Internal/Views/config.php file. Recommendations For Schben Adive...

CVE-2019-14346: Cross-Site Request Forgery (CSRF)

Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password...