Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 09/11/2022 Updated: 10/11/2022

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 0

DedeCMS v6.1.9 exists to contain a Cross-Site Request Forgery (CSRF) which allows malicious users to arbitrarily add Administrator accounts and modify Admin passwords.

Vulnerable Product	Search on Vulmon	Subscribe to Product
dedecms dedecms 6.1.9

Dedecmsv6

CVE-2022-43031 Log in to the website background using the website default password admin/admin Visit the csrf attack website,Add an administrator user The user was successfully created but could not log in There was a problem with the system code The created users could not log in After checking the code, we found that the stored password was not the password we entered

CWE-352 https://github.com/cai-niao98/Dedecmsv6 https://gist.github.com/cai-niao98/77a7aa934492c2d651b37b75243eda0b https://nvd.nist.gov https://github.com/cai-niao98/Dedecmsv6

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-43031

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect