Описание
Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the email address (ID) of another user.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| silverstripe | itp | package |
Примечания
http://seclists.org/oss-sec/2012/q2/209
EPSS
Процентиль: 66%
0.00516
Низкий
Связанные уязвимости
nvd
больше 13 лет назад
Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the email address (ID) of another user.
github
больше 3 лет назад
Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the email address (ID) of another user.
EPSS
Процентиль: 66%
0.00516
Низкий