Skip to content
OpenAdvisories
Unscored CVE-2011-5315 EUVD-2011-5214GHSA-m839-wv3j-ch5r

Cross-site request forgery (CSRF) vulnerability in admin/index.php in whCMS 0.115 alpha allows remote attackers to hijack the authenticatio…

Published Jan 1, 2015 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in admin/index.php in whCMS 0.115 alpha allows remote attackers to hijack the authentication of administrators for requests that modify credentials via a user save action.

References