Security Advisory

CVE-2020-19886

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-24 14:33:44
Last updated 2024-08-04 14:15:28
Assigner mitre
State PUBLISHED

Description

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu.