Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RiteCMS 跨站请求伪造漏洞
Vulnerability Description
RiteCMS是RiteCMS项目所开发的一套简单的、轻量级的内容管理系统(CMS)。该系统具有易于开发、安装、维护等特点。 RiteCMS 1.0.0版本中存在跨站请求伪造漏洞,该漏洞源于程序没有正确验证用户提交到index.php脚本的输入。远程攻击者可通过发送畸形的HTTP请求到cms/index.php脚本,利用该漏洞更改管理员密码。
CVSS Information
N/A
Vulnerability Type
N/A