Description (CNA)
A vulnerability classified as problematic was found in SeaCMS 13.0. Affected by this vulnerability is an unknown functionality of the file /member.php?action=chgpwdsubmit of the component Password Change Handler. The manipulation of the argument newpwd/newpwd2 leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272575.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / SeaCMS | affected 13.0 |
CWE
CWE-352
References
- https://vuldb.com/?id.272575
- https://vuldb.com/?ctiid.272575
- https://vuldb.com/?submit.379473
- https://github.com/HuaQiPro/seacms/issues/30
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.