exploitDog

CVE-2019-11375

Опубликовано: 20 апр. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.

Ссылки

http://packetstormsecurity.com/files/152604/Msvod-10-Cross-Site-Request-Forgery.html
Exploit
Third Party Advisory
VDB Entry
http://www.iwantacve.cn/index.php/archives/198/
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/46739/
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/152604/Msvod-10-Cross-Site-Request-Forgery.html
Exploit
Third Party Advisory
VDB Entry
http://www.iwantacve.cn/index.php/archives/198/
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/46739/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:meisivod:msvod:10:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00326

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-pgmv-29gq-3rvv

CVSS3: 6.5

github

больше 3 лет назад

Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.

EPSS

Процентиль: 55%

0.00326

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352