Vulnerabilities (CVE)

Filtered by vendor Instant-update Subscribe
Filtered by product Instant Update Cms
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-1000501 1 Instant-update 1 Instant Update Cms 2024-02-28 7.5 HIGH 9.8 CRITICAL
Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/auth.php that can result in Account Tackover. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in v0.3.3.