Description
An issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin password via index.php?s=/admin/rbacuser/update/navTabId/listusers/callbackType/closeCurrent.
Unscored
CVE-2018-16345
EUVD-2018-8192GHSA-wmqj-3p3m-7m45
An issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin password via index.php?s=/admin/rbacuser/up…
Published Sep 2, 2018 · Updated Aug 5, 2024 · Assigned by mitre