CVE-2020-19886

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu

published August 24, 2020

CVSS
—
EPSS
0%
Percentile
37.1
In the wild
Unconfirmed
What it is

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00439 · 37.1th percentile
Published
2020-08-24T14:33Z
EPSS history
Timeline
  • 24 AUG 14:33Z
    DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu
    cvelistv5