CVE-2019-11332

MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail…

published April 18, 2019

CVSS
—
EPSS
2%
Percentile
78.6
In the wild
Unconfirmed
What it is

MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01824 · 78.6th percentile
Published
2019-04-18T22:17Z
EPSS history
Timeline
  • 18 APR 22:17Z
    MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail…
    cvelistv5