CVE-2018-17102

CVE-2018-17102 affects QuickAppsCMS (QACMS) up to version 2.0.0-beta2. The issue is a Cross-Site Request Forgery (CSRF) vulnerability that can change the administrator password via the /user/me URI. Documented impact indicates high-severity outcomes (e.g., unauthorized password change) with netwo...

PT-2018-13896

Name of the Vulnerable Software and Affected Versions QuickAppsCMS versions through 2.0.0-beta2 Description An issue allows a CSRF vulnerability to change the administrator password via the "user/me" URI. Recommendations For versions through 2.0.0-beta2, update to a version that contains a fix fo...

CVE-2018-17102: Cross-Site Request Forgery (CSRF)

An issue was discovered in QuickAppsCMS aka QACMS through 2.0.0-beta2. A CSRF vulnerability can change the administrator password via the user/me URI...