Skip to content

CVE-2018-15844 An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit.

HighCVSS 8.8 EPSS 2.4% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit.

Affected products

ProductAffected versionsFixed in
damicms = 6.0.0 No fix listed

References

  • github.com third-party-advisory
  • 45314 exploit third-party-advisory vdb-entry