packetstormsecurity.com
http://packetstormsecurity.com/files/156106/Adive-Framework-2.0.8-Cross-Site-Request-Forgery.html CVE-2020-7991
HIGH
Adive Framework 2.0.8 - Persistent Cross-Site Scripting
Record summary
CVE-2020-7991 has a selected CVSS score of 8.8 (high); EIP currently links 2 catalogued exploits.
Description
Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBAdive Framework 2.0.8 - Persistent Cross-Site ScriptingExploitDB exploitby Sarthak SainiNot analyzed1 file
ExploitDBAdive Framework 2.0.8 - Cross-Site Request Forgery (Change Admin Password)ExploitDB exploitby Sarthak SainiNot analyzed1 file
References
4github.com
https://github.com/ferdinandmartin/adive-php7/blob/master/README.md nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-7991 exploit-db.com
https://www.exploit-db.com/exploits/47946