26 matches found
Cross site request forgery (csrf)
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...
CVE-2018-9092
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...
CVE-2018-9092
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...
CVE-2018-9092
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...
CVE-2018-9092
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...
CVE-2018-9092
MiniCMS 1.10 has a Cross-Site Request Forgery vulnerability in mc-admin/conf.php that can change the administrator password. Public details show CVE-2018-9092 with CVSS v2 base 6.8 (MEDIUM) and CVSS v3 base 8.8 (HIGH); attack vector NETWORK, authentication NONE, but user interaction is REQUIRED p...