medium6.5Public exploit code
CVE-2020-15600
An issue was discovered in CMSUno before 1.6.1.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CMSUno 1.6 - Cross-Site Request Forgery (Change Admin Password)2020-07-17 · webapps · php
Impact
An issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cmsuno Project | Cmsuno | before 1.6.1 |