CVE-2020-15014

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF...

Cross site request forgery (csrf)

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF...

CVE-2020-15014

BlogCMS (through 2019-12-31) is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the admin/changepass.php endpoint. Multiple sources (CNVD-2021-38665, CVE-2020-15014, RH/CVE, NVD, and PRION) consistently describe a CSRF flaw in BlogCMS that can enable unauthorized state-changing r...

PT-2020-14119

Name of the Vulnerable Software and Affected Versions pramodmahato BlogCMS through 2019-12-31 Description The issue concerns a CSRF vulnerability in the admin/changepass.php endpoint. This allows for potential unauthorized password changes. Recommendations For pramodmahato BlogCMS through...