PT-2018-13859

Name of the Vulnerable Software and Affected Versions CMS MaeloStore version 1.5.0 Description A CSRF issue allows changing the administrator password via the "admin/modul/users/aksi users.php?act=update" API endpoint. Recommendations For CMS MaeloStore version 1.5.0, as a temporary workaround,...