DamiCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-19082)

DamiCMS is a content management system CMS for building websites quickly. A cross-site request forgery vulnerability exists in the admin.php?s=/Admin/doedit URL in DamiCMS version 6.0.0, which can be exploited by a remote attacker to change the password of an administrator account...

PT-2018-13494

Name of the Vulnerable Software and Affected Versions DamiCMS version 6.0.0 Description The issue allows for a CSRF attack to change the administrator account's password through the "admin.php?s=/Admin/doedit" endpoint. Recommendations For DamiCMS version 6.0.0, update to a newer version that...

CVE-2018-15844

An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit...

CVE-2018-15844: Cross-Site Request Forgery (CSRF)

An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit...

PT-2018-13233

Name of the Vulnerable Software and Affected Versions DamiCMS version 6.0.0 Description An issue was discovered that allows revision of the administrator account's password via the "API Endpoint: /admin.php?s=/Admin/doedit" due to a CSRF vulnerability. Recommendations For DamiCMS version 6.0.0,...