CVE-2013-5316

Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.27% chance of exploitation in the next 30 days, 82th percentile

Published

2013-08-20

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/27315

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27315

References

• CVE Record
• NVD entry

Related

• CVE-2013-5314
• CVE-2013-5317
• CVE-2013-5312
• CVE-2013-5318
• CVE-2013-5311
• CVE-2013-5321