Adive
by Schben
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-14347 | Hig | 0.61 | 8.8 | 0.09 | Aug 6, 2019 | Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a Python PoC script. | ||
| CVE-2019-14346 | Hig | 0.60 | 8.8 | 0.03 | Aug 6, 2019 | Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password. |
- risk 0.61cvss 8.8epss 0.09
Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a Python PoC script.
- risk 0.60cvss 8.8epss 0.03
Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password.