2 matches found
CVE-2018-18191: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in /admin.php?c=member&m=edit&uid=1 in dayrui FineCms 5.4 allows remote attackers to change the administrator's password...
8.8CVSS7.8AI score0.00806EPSS
SaveExploits1References2
CVE-2004-1661: Undefined Security Weakness
MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."...
7.5CVSS5.8AI score0.02892EPSS
SaveExploits2References1
20