← All advisories

Medium severity6.5NVD Advisory· Published Nov 30, 2020· Updated Jun 17, 2026

CVE-2020-17901

CVE-2020-17901

Description

Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user.

Affected products

3

Pbootcmspro/Pbootcms2 versions
cpe:2.3:a:pbootcms:pbootcms:1.3.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pbootcms:pbootcms:1.3.2:*:*:*:*:*:*:*
- (no CPE)range: <=1.3.2
PbootCMS/PbootCMSdescription

Patches

Vulnerability mechanics

References

1

github.com/AvaterXXX/PbootCMS/blob/master/CSRF.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.