NoneCMS v1.3 has CSRF in public/index.php/admin/admin/dele.html, as demonstrated by deleting the admin user.
References
Link | Resource |
---|---|
http://www.iwantacve.cn/index.php/archives/337/ | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-09-23 07:15
Updated : 2019-09-23 11:34
NVD link : CVE-2019-16721
Mitre link : CVE-2019-16721
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
5none
- nonecms