CVE-2019-11332
18.04.2019, 23:29
MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mkcms_project | mkcms | 5.0 |
𝑥
= Vulnerable software versions