Beveiligingsadvies

CVE-2019-11332

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-04-18 22:17:14
Laatst bijgewerkt 2024-08-04 22:48:09
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456.