CVEvulnerability
CVE-2013-5316
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.
Affected configurations
• ritecms ritecms 1.0.0
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://packetstormsecurity.com/files/122663/Rite-CMS-1.0.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html Exploit
- http://www.exploit-db.com/exploits/27315 Exploit
- http://www.securityfocus.com/bid/61587 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86193 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.com/files/122663/Rite-CMS-1.0.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html Exploit
- http://www.exploit-db.com/exploits/27315 Exploit
- http://www.securityfocus.com/bid/61587 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86193 exchange.xforce.ibmcloud.com