PT-2015-3511
CVE-2011-5315
·
تاريخ النشر
2015-01-01
·
تاريخ التحديث
2015-01-02
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
whCMS version 0.115 alpha
Description
A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that modify credentials via a user save action.
Recommendations
For whCMS version 0.115 alpha, consider disabling the user save action in admin/index.php until a patch is available to prevent exploitation. Restrict access to the admin/index.php module to minimize the risk of hijacking administrator authentication.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾