FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.
References
Link | Resource |
---|---|
https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2017-12-27 09:08
Updated : 2018-01-09 09:45
NVD link : CVE-2017-17903
Mitre link : CVE-2017-17903
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
fortunescripts
- lynda_clone