PT-2018-13494

Name of the Vulnerable Software and Affected Versions DamiCMS version 6.0.0 Description The issue allows for a CSRF attack to change the administrator account's password through the "admin.php?s=/Admin/doedit" endpoint. Recommendations For DamiCMS version 6.0.0, update to a newer version that...