CVE-2018-16331

admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account’s password.

Date published : 2018-09-01

https://github.com/Vict00r/poc/issues/1