CVE-2020-15014

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF...

Cross site request forgery (csrf)

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF...

CVE-2020-15014

BlogCMS (through 2019-12-31) is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the admin/changepass.php endpoint. Multiple sources (CNVD-2021-38665, CVE-2020-15014, RH/CVE, NVD, and PRION) consistently describe a CSRF flaw in BlogCMS that can enable unauthorized state-changing r...