CVE Daily

CVE-2010-5318

The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allow...

Medium CVSS 4.3

Overview

The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail address in the email parameter.

CWE: CWE-255 Published: 2015-01-03T11:59:04.237
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.3 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags