Msvod 10 - Cross-Site Request Forgery (Change User Information) Exploit

Exploit for php platform in category web applications Exploit Title: Msvod v10 has a CSRF vulnerability to change user information Exploit Author: ax8 Vendor Homepage: https://github.com/Li-Siyuan Software Link: https://www.msvodx.com/ Version: v10 CVE : CVE-2019-11375 Msvod v10 has a CSRF...

CVE-2019-11375

CVE-2019-11375 affects Msvod v10 and describes a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change user information via the URI /admin/member/edit.html. The Red Hat, ENISA EUVD, Exploit-DB, PacketStorm, and related entries corroborate the core issue: a CSRF flaw en...