Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:32 a.m.5 views

CVE-2024-0880

A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...

8.8CVSS8.6AI score0.00296EPSS
Exploits1References1
NVD
NVD
added 2024/01/25 6:15 p.m.19 views

CVE-2024-0880

A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...

8.8CVSS5.7AI score0.00296EPSS
Exploits1References3
OSV
OSV
added 2024/01/25 6:15 p.m.0 views

CVE-2024-0880

A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...

8.8CVSS4.6AI score
Exploits0References3
Prion
Prion
added 2024/01/25 6:15 p.m.21 views

Cross site request forgery (csrf)

A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...

5CVSS6.9AI score0.00296EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/25 5:31 p.m.3 views

CVE-2024-0880 Qidianbang qdbcrm Password Reset cross-site request forgery

A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...

5CVSS8.6AI score0.00296EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/01/25 5:31 p.m.23 views

CVE-2024-0880 Qidianbang qdbcrm Password Reset cross-site request forgery

A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...

5CVSS8.8AI score0.00296EPSS
Exploits1References3
CVE
CVE
added 2024/01/25 5:31 p.m.46 views

CVE-2024-0880

CVE-2024-0880 affects Qidianbang qdbcrm 1.1.0, specifically the Password Reset feature’s /user/edit?id=2 endpoint. The issue is a cross-site request forgery (CSRF) vulnerability that can be exploited remotely and has been publicly disclosed. Impact is described as enabling unauthorized state-chan...

8.8CVSS8.5AI score0.00296EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/25 12:0 a.m.3 views

PT-2024-15885 · Qidianbang · Qidianbang Qdbcrm

Name of the Vulnerable Software and Affected Versions: Qidianbang qdbcrm version 1.1.0 Description: A vulnerability was found in the Password Reset component of Qidianbang qdbcrm, affecting some unknown functionality of the file /user/edit?id=2. This issue leads to cross-site request forgery and...

8.8CVSS4.9AI score0.00296EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/01/25 12:0 a.m.3 views

Qidianbang qdbcrm Cross-Site Request Forgery Vulnerability

Qidianbang qdbcrm is a customer relationship management platform. A cross-site request forgery vulnerability exists in Qidianbang qdbcrm version 1.1.0, which originates from the inclusion of an unknown function in the component Password Reset, leading to cross-site request forgery...

8.8CVSS6.7AI score0.00296EPSS
Exploits1References4
Rows per page
Query Builder