Cross site request forgery (csrf)

Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...

CVE-2018-5976: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...

PT-2018-17262

Name of the Vulnerable Software and Affected Versions: RSVP Invitation Online version 1.0 Description: A Cross Site Request Forgery CSRF issue exists, allowing modification of the admin password via the function/account.php endpoint. Recommendations: For RSVP Invitation Online version 1.0, consid...