In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server (corresponding to the identity authentication information) as the victim without the victim's knowledge.
References
| Link | Resource |
|---|---|
| https://github.com/whiex/webvue/blob/gh-pages/Ftcms%20CSRF.md | Exploit Third Party Advisory |
| https://github.com/whiex/webvue/blob/gh-pages/Ftcms%20CSRF.md | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/whiex/webvue/blob/gh-pages/Ftcms%20CSRF.md - Exploit, Third Party Advisory |
Information
Published : 2022-09-07 15:15
Updated : 2024-11-21 07:15
NVD link : CVE-2022-37730
Mitre link : CVE-2022-37730
CVE.ORG link : CVE-2022-37730
JSON object : View
Products Affected
ftcms
- ftcms
CWE
CWE-352
Cross-Site Request Forgery (CSRF)