Lucene search
Veracode Vulnerability DatabaseVERACODE:4676HistoryJul 26, 2017 - 12:48 a.m.
Cross-site Request Forgery (CSRF)
2017-07-2600:48:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
84
0.001 Low
EPSS
Percentile
48.7%
CMS Made Simple is vulnerable to cross-site request forgery (CSRF) attacks. A malicious user can hijack the authentication of admins for requests to create accounts through an admin/adduser.php requests.
| CPE | Name | Operator | Version |
|---|---|---|---|
| torfs-ict/cmsms | le | 2.1.5.6 |
Related
openvas
openvas
CMS Made Simple < 2.1.6 CSRF Vulnerability
2017-01-24 00:00:00
cve
cve
CVE-2016-7904
2017-01-16 06:59:00
nvd
nvd
CVE-2016-7904
2017-01-16 06:59:00
cvelist
cvelist
CVE-2016-7904
2017-01-16 06:00:00
prion
prion
Cross site request forgery (csrf)
2017-01-16 06:59:00