Design/Logic Flaw

An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my...

CVE-2018-14331

An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my...

CVE-2018-14331

An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my...

CVE-2018-14331

The CVE-2018-14331 issue affects XiaoCms X1 v20140305 and is a CSRF vulnerability that allows changing the administrator password via admin/index.php?c=index&a=my. Public records across sources confirm the affected software and the vulnerability class, with CVSS vectors indicating partial confide...

CVE-2018-14331: Cross-Site Request Forgery (CSRF)

An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my...

PT-2018-12446

Name of the Vulnerable Software and Affected Versions XiaoCms X1 version v20140305 Description An issue was discovered that allows for a CSRF vulnerability, enabling an attacker to change the administrator account password via the "admin/index.php?c=index&a=my" API endpoint. Recommendations For...