CVE-2018-18191

Cross-site request forgery CSRF vulnerability in /admin.php?c=member=edit=1 in dayrui FineCms 5.4 allows remote attackers to change the administrator's password...

CVE-2018-18191

CVE-2018-18191 describes a Cross‑Site Request Forgery (CSRF) vulnerability in Dayrui FineCms 5.4, specifically in /admin.php?c=member&m=edit&uid=1, which allows remote attackers to change the administrator’s password. The connected documents confirm the affected product/version and the vulnerable...