PT-2014-5563

Name of the Vulnerable Software and Affected Versions Usercake versions 2.0.2 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the passwordc parameter or the administrative e-mail...

CVE-2014-3866: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in usersettings.php in Usercake 2.0.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that change the 1 administrative password via the passwordc parameter or 2 administrative e-mail address vi...