Описание
EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.
Ссылки
- Vendor Advisory
- ExploitThird Party AdvisoryVDB Entry
- Vendor Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:egavilanmedia:user_registration_\&_login_system_with_admin_panel:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 38%
0.00163
Низкий
8 High
CVSS3
6 Medium
CVSS2
Дефекты
CWE-352
Связанные уязвимости
github
больше 3 лет назад
EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.
EPSS
Процентиль: 38%
0.00163
Низкий
8 High
CVSS3
6 Medium
CVSS2
Дефекты
CWE-352