Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/admin_admin.php.
References
Link | Resource |
---|---|
https://github.com/source-trace/beescms | Product |
https://github.com/source-trace/beescms/issues/5 | Exploit |
https://github.com/source-trace/beescms | Product |
https://github.com/source-trace/beescms/issues/5 | Exploit |
Configurations
History
21 Nov 2024, 05:13
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/source-trace/beescms - Product | |
References | () https://github.com/source-trace/beescms/issues/5 - Exploit |
12 May 2023, 12:49
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
References | (MISC) https://github.com/source-trace/beescms - Product | |
References | (MISC) https://github.com/source-trace/beescms/issues/5 - Exploit | |
CPE | cpe:2.3:a:beescms:beescms:4.0:*:*:*:*:*:*:* | |
CWE | CWE-352 |
08 May 2023, 14:17
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-05-08 14:15
Updated : 2024-11-21 05:13
NVD link : CVE-2020-22334
Mitre link : CVE-2020-22334
CVE.ORG link : CVE-2020-22334
JSON object : View
Products Affected
beescms
- beescms
CWE
CWE-352
Cross-Site Request Forgery (CSRF)