CVE-2019-7570: CSRF
First published: Thu Feb 07 2019(Updated: )
A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pbootcms Pbootcms | =1.3.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this CSRF vulnerability?
The vulnerability ID for this CSRF vulnerability is CVE-2019-7570.
What is the severity level of CVE-2019-7570?
The severity level of CVE-2019-7570 is medium (6.5).
How does the CSRF vulnerability in PbootCMS v1.3.6 affect the software?
The CSRF vulnerability in PbootCMS v1.3.6 can be exploited to delete users via the URI admin.php/User/del/ucode/.
Which version of PbootCMS is affected by this CSRF vulnerability?
The CSRF vulnerability affects PbootCMS version 1.3.6.
Is there a fix available for this CSRF vulnerability in PbootCMS v1.3.6?
Yes, it is recommended to update to a patched version of PbootCMS to mitigate the CSRF vulnerability.
- collector/nvd-index
- vendor/pbootcms
- canonical/pbootcms pbootcms
- version/pbootcms pbootcms/1.3.6