Vulnerabilidades de Abc-Erp

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Abc-Erp: 1 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2018-25174 Média · 5.3 CWE-352 06/03/2026

ABC ERP 0.6.4 Cross-Site Request Forgery via _configurar_perfil.php

ABC ERP 0.6.4 contains a cross-site request forgery vulnerability that allows attackers to modify administrator credentials by submitting forged requests to _configurar_perfil.php. Attackers can craft malicious forms or links containing parameters like usuario, contrasena1, contrasena2, nombre, and email to change admin account settings without authentication.