CVE-2017-8382

admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.5 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
admidioadmidio
3.2.8
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://en.0day.today/exploit/27771
https://github.com/Admidio/admidio/issues/612
https://github.com/faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc
https://www.exploit-db.com/exploits/42005/
http://en.0day.today/exploit/27771
https://github.com/Admidio/admidio/issues/612
https://github.com/faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc
https://www.exploit-db.com/exploits/42005/