authorized Admin Account Takeover

Description The icms2 contains a flaw in its admin account management functionality, specifically in the process of changing and resetting passwords for administrators. Through careful analysis and testing, it was observed that an authenticated administrator has the capability to change the...

PT-2021-11004

Name of the Vulnerable Software and Affected Versions: Ponzu version 0.11.0 Description: A cross site request forgery CSRF vulnerability in the configure.html component allows attackers to change user and administrator credentials, and add or delete administrator accounts. Recommendations: For...