Description
In Monstra CMS 3.0.4, an attacker with 'Editor' privileges can change the password of the administrator via an admin/index.php?id=users&action=edit&user_id=1, Insecure Direct Object Reference (IDOR).
Unscored
CVE-2018-16608
EUVD-2018-8415GHSA-5p7f-47wp-86c5
In Monstra CMS 3.0.4, an attacker with 'Editor' privileges can change the password of the administrator via an admin/index.php?id=users&act…
Published Sep 10, 2018 · Updated Aug 5, 2024 · Assigned by mitre