Lucene search
+L

6 matches found

NVD
NVD
•added 2013/08/20 2:55 p.m.•32 views

CVE-2013-5316

Cross-site request forgery CSRF vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php...

6.8CVSS7.2AI score0.02268EPSS
SaveExploits2References4
Prion
Prion
•added 2013/08/20 2:55 p.m.•32 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php...

6.8CVSS7.8AI score0.02268EPSS
SaveExploits2References4Affected Software1
CVE
CVE
•added 2013/08/20 2:00 p.m.•64 views

CVE-2013-5316

The CVE-2013-5316 entry describes a CSRF vulnerability in RiteCMS 1.0.0 that lets an attacker hijack administrator sessions to perform password changes via an admin action to cms/index.php. The affected component is the RiteCMS 1.0.0 admin password change flow; root cause is inadequate CSRF prote...

6.8CVSS7.5AI score0.02268EPSS
SaveExploits2References4Affected Software1
Mend
Mend
•added 2013/08/19 8:00 p.m.•7 views

CVE-2013-5313

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...

6.8CVSS0.00885EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/19 12:00 a.m.•8 views

CVE-2013-5313: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...

6.8CVSS6AI score0.00885EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2013/08/19 12:00 a.m.•7 views

PT-2013-5473

Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.0 RC2 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...

6.8CVSS0.00885EPSS
SaveExploits1References3
Rows per page
Query Builder