Lucene search
GoogleOSV:CVE-2018-16608HistorySep 10, 2018 - 1:29 p.m.
CVE-2018-16608
2018-09-1013:29:00
Google
osv.dev
4
In Monstra CMS 3.0.4, an attacker with ‘Editor’ privileges can change the password of the administrator via an admin/index.php?id=users&action=edit&user_id=1, Insecure Direct Object Reference (IDOR).
Related
cvelist
cvelist
CVE-2018-16608
2018-09-10 13:00:00
nvd
nvd
CVE-2018-16608
2018-09-10 13:29:00
cve
cve
CVE-2018-16608
2018-09-10 13:29:00
prion
prion
Design/Logic Flaw
2018-09-10 13:29:00
openvas
openvas
Monstra CMS <= 3.0.4 Multiple Vulnerabilities
2018-05-29 00:00:00