PT-2019-6077 · Aik · Aikcms

Richard1266 · Publicado 2019-04-29 · Atualizado 2021-08-17 · CVE-2020-18464

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AikCms version 2.0.0

Description The issue is related to a Cross Site Request Forgery (CSRF) vulnerability in the video list.php file. This can allow a malicious user to delete movie information. The vulnerability can be exploited by a remote attacker.

Recommendations For AikCms version 2.0.0, consider disabling access to the video list.php file until a patch is available to prevent exploitation of the CSRF vulnerability. Restricting the functionality related to deleting movie information can also help minimize the risk.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

BDU:2021-04718

CVE-2020-18464

Produtos afetados

Aikcms

Referências · 5

• 🔥 https://github.com/Richard1266/aikcms/issues/2 · Exploit
• https://vuldb.com/?id.180721 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-18464 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2020-18464 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2021-04718 · Nota de Segurança