CVE-2017-9673 | BDVDB-2026-86646 Detail

Description#

In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/user/new URI) or change its settings (via the index.php/user/1 URI), including its password.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-06-15Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.