Security Advisory
CVE-2018-16345
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin password via index.php?s=/admin/rbacuser/update/navTabId/listusers/callbackType/closeCurrent.