Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Qidianbang qdbcrm Password Reset cross-site request forgery
Vulnerability Description
A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252032. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
Qidianbang qdbcrm 跨站请求伪造漏洞
Vulnerability Description
Qidianbang qdbcrm是一个客户关系管理平台。 Qidianbang qdbcrm 1.1.0版本存在跨站请求伪造漏洞，该漏洞源于组件 Password Reset中包含未知函数，导致跨站请求伪造。
CVSS Information
N/A
Vulnerability Type
N/A