Msvod 10 Cross Site Request Forgery

Exploit Title: Msvod v10 has a CSRF vulnerability to change user information Date: 2019-04-14 Exploit Author: ax8 Vendor Homepage: https://github.com/Li-Siyuan Software Link: https://www.msvodx.com/ Version: v10 CVE : CVE-2019-11375 Msvod v10 has a CSRF vulnerability to change user information vi...

PT-2019-12266

Name of the Vulnerable Software and Affected Versions Msvod version 10 Description The issue allows an attacker to change user information via the "admin/member/edit.html" API endpoint. This is achieved through a CSRF vulnerability, which can be exploited to modify user data without the user's...

CVE-2019-11375: Cross-Site Request Forgery (CSRF)

Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI...