Description

SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to admin/security.

Remediation

References

CVE-2010-5090

Related Vulnerabilities

WordPress Plugin Sports Rankings and Lists Cross-Site Scripting (3.5)

Squid Out-of-bounds Write Vulnerability (CVE-2019-12521)

WordPress Plugin NotificationX-WooCommerce Sales Notification Popup, Custom & Live Sales Notification, FOMO, Social Proof, Announcement Banner & Sticky Notification Bar SQL Injection (2.3.11)

WordPress Plugin Tutor LMS-eLearning and online course solution SQL Injection (2.7.0)

WordPress CVE-2011-4899 Vulnerability (CVE-2011-4899)

Severity

Medium

Classification

CVE-2010-5090 CWE-264

Tags

Missing Update Known Vulnerabilities