high8.8Public exploit code
CVE-2021-30147
DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF)2021-04-08 · webapps · multiple
Impact
DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dmasoftlab | Radius Manager | Version 4.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dmasoftlab.com/
- http://packetstormsecurity.com/files/162136/DMA-Radius-Manager-4.4.0-Cross-Site-Request-Forgery.html
- https://github.com/1d8/publications/tree/main/cve-2021-30147
- http://dmasoftlab.com/
- http://packetstormsecurity.com/files/162136/DMA-Radius-Manager-4.4.0-Cross-Site-Request-Forgery.html
- https://github.com/1d8/publications/tree/main/cve-2021-30147