PT-2018-14590

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description A CSRF issue allows changing the super administrator's username via the "index.php?m=member&f=index&v=edit&uid=1" endpoint, specifically targeting the uid variable set to 1, which corresponds to the super...

PT-2018-14353

Name of the Vulnerable Software and Affected Versions FineCms version 5.4 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to modify the administrator's password through the "/admin.php?c=member&m=edit&uid=1" endpoint. Recommendations For FineCms version 5.4, ...

CVE-2018-18191: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in /admin.php?c=member&m=edit&uid=1 in dayrui FineCms 5.4 allows remote attackers to change the administrator's password...

CVE-2004-1661: Undefined Security Weakness

MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."...