4 matches found
razorCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-26701)
razorCMS is an open source content management system written in PHP, which stores all data in flat files, so there is no need to install a database. A cross-site request forgery vulnerability exists in the rars/user/data page in razorCMS version 3.4.8. A remote attacker can exploit this...
Cross site request forgery (csrf)
rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user...
PT-2018-14315
Name of the Vulnerable Software and Affected Versions razorCMS version 3.4.8 Description The issue allows for a CSRF attack, enabling an attacker to change the password of an admin user by manipulating the rars/user/data endpoint. Recommendations For razorCMS version 3.4.8, consider implementing...
