4.3
CVSSv2

CVE-2010-5318

Published: 03/01/2015 Updated: 05/01/2015
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

The password-reset feature in as/index.php in SweetRice CMS prior to 0.6.7.1 allows remote malicious users to modify the administrator's password by specifying the administrator's e-mail address in the email parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

basic-cms sweetrice 0.6.7.1

Exploits

Vulnerability ID: HTB22669 Reference: wwwhtbridgech/advisory/reset_admin_password_in_sweetrice_cmshtml Product: SweetRice CMS Vendor: basic-cmsorg ( wwwbasic-cmsorg/ ) Vulnerable Version: 067 Vendor Notification: 21 October 2010 Vulnerability Type: Logic error Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response Risk ...