Skip to content

CVE-2018-10312 index.php?m=member&v=pw_reset in WUZHI CMS 4.1.0 allows CSRF to change the password of a common member.

HighCVSS 8.8 EPSS 2.3% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

index.php?m=member&v=pw_reset in WUZHI CMS 4.1.0 allows CSRF to change the password of a common member.

Affected products

ProductAffected versionsFixed in
wuzhicms = 4.1.0 No fix listed

References

  • github.com exploit third-party-advisory
  • 44504 exploit third-party-advisory vdb-entry