CVE

Id
65263  
CVE No.
CVE-2013-5316  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.  
Phase
Assigned (20130820)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
638314 65263 CVE-2013-5316 EXPLOIT-DB:27315  View
638315 65263 CVE-2013-5316 URL:http://www.exploit-db.com/exploits/27315  View
638316 65263 CVE-2013-5316 MISC:http://packetstormsecurity.com/files/122663/Rite-CMS-1.0.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html  View
638317 65263 CVE-2013-5316 BID:61587  View
638318 65263 CVE-2013-5316 URL:http://www.securityfocus.com/bid/61587  View
638319 65263 CVE-2013-5316 XF:ritecms-index-csrf(86193)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22234 JVNDB-2013-003809 AlienVault Open Source Security Information Management における SQL インジェクションの脆弱性 AlienVault Open Source Security Information Management (OSSIM) には、SQL インジェクションの脆弱性が存在します。 CVE-2013-5321 65263 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003809.html  View