high8.8Public exploit code
CVE-2018-15844
An issue was discovered in DamiCMS 6.0.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DamiCMS 6.0.0 - Cross-Site Request Forgery (Change Admin Password)2018-08-31 · webapps · php
Impact
An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Damicms | Damicms | Version 6.0.0 |