CVE-2016-20054 — Nodcms Cross Site Request Forgery via admin endpoints

CVE-2016-20054

Nodcms Cross Site Request Forgery via admin endpoints PUBLISHED

Description (CNA)

Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms. Attackers can trick authenticated administrators into submitting requests to admin/user_manipulate and admin/settings/generall endpoints to create users or modify application settings without explicit consent.

Affected (CNA)

Vendor / product	Versions
nodcms / nodCMS	affected 1.0

CWE

CWE-79

References

https://www.exploit-db.com/exploits/40707

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.