high8.8
CVE-2018-16345
An issue was discovered in EasyCMS 1.5.
Impact
An issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin password via index.php?s=/admin/rbacuser/update/navTabId/listusers/callbackType/closeCurrent.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easycms | Easycms | Version 1.5 |