| Название | http://www.mrcms.cn/ mrcms 3.1.2 Cross-Site Request Forgery |
|---|
| Описание | The admin/user/save.do interface of mrcms_v3.1.2 has a CSRF vulnerability, CSRF attacks can exploit the login status of users to perform malicious operations without the user's knowledge, resulting in serious consequences such as user information leakage, account tampering, or sensitive operations being accidentally triggered. |
|---|
| Источник | ⚠️ https://github.com/bdkuzma/vuln/issues/8 |
|---|
| Пользователь | baihekuz (UID 84516) |
|---|
| Представление | 22.04.2025 11:49 (1 Год назад) |
|---|
| Модерация | 05.05.2025 16:55 (13 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 307428 [MRCMS 3.1.2 подделка межсайтовых запросов] |
|---|
| Баллы | 19 |
|---|