CVE-2019-7738

CVE-2019-7738 affects C.P.Sub prior to version 5.3 and is a CSRF vulnerability exploitable via a manage.php?p=article_del&id= URI. The issue is described consistently across multiple sources (NVD and related records) as a CSRF in the article deletion path. The documents do not provide concrete ex...

TinyRise 邮件欺诈可重置任何人密码和后台sql注射

简要描述： TinyRise 邮件欺诈可重置任何人密码和后台sql注射 详细说明： simple.php: public function forgetact $email = Filter::sqlReq::args'email'; $model = $this-model-table'user'; $obj = $model-where"email = '".$email."'"-find; if!empty$obj $model = $this-model-table'resetpassword'; $obj = $model-where"email =...