CVE-2013-5316

Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.27% chance of exploitation in the next 30 days, 83rd percentile

Published

2013-08-20

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/27315

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27315

Security advisories

• http://www.securityfocus.com/bid/61587

References

• CVE Record
• NVD entry