In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/user/new URI) or change its settings (via the index.php/user/1 URI), including its password.
Published: 2017-06-15
Description
In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/user/new URI) or change its settings (via the index.php/user/1 URI), including its password.
AI Intelligence Brief
AI Intelligence
Analyzing vulnerability vectors…
🤖Free for new accounts
3 Free AI Intelligence Analyses
Get the full picture on any CVE — kill chain diagrams, exploit sequences, technical breakdowns, and key risks. No credit card required.