Submit #563555: http://www.mrcms.cn/ mrcms 3.1.2 Cross-Site Request Forgeryinfo

Titlehttp://www.mrcms.cn/ mrcms 3.1.2 Cross-Site Request Forgery
DescriptionThe admin/user/save.do interface of mrcms_v3.1.2 has a CSRF vulnerability, CSRF attacks can exploit the login status of users to perform malicious operations without the user's knowledge, resulting in serious consequences such as user information leakage, account tampering, or sensitive operations being accidentally triggered.
Source⚠️ https://github.com/bdkuzma/vuln/issues/8
User
 baihekuz (UID 84516)
Submission04/22/2025 11:49 (1 Year ago)
Moderation05/05/2025 16:55 (13 days later)
StatusAccepted
VulDB entry307428 [MRCMS 3.1.2 cross-site request forgery]
Points19

Do you know our Splunk app?

Download it now for free!