Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-10014

EPSS 0.11% · P29
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2019-10014

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Desdev DedeCMS 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Desdev DedeCMS（织梦内容管理系统）是中国卓卓网络（Desdev）公司的一套基于PHP的开源内容管理系统（CMS）。该系统具有内容发布、内容管理、内容编辑和内容检索等功能。 Desdev DedeCMS 5.7SP2版本中的member/resetpassword.php文件存在安全漏洞，该漏洞源于程序没有正确地验证参数。远程攻击者可借助‘id’参数利用该漏洞重置任意用户的密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2019-10014

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-10014

请登录查看更多情报信息。

Same Patch Batch · n/a · 2019-03-24 · 26 CVEs total

CVE-2019-10010PHP League CommonMark library 跨站脚本漏洞
CVE-2019-9960LimeSurvey 访问控制错误漏洞
CVE-2019-9962XnView MP 缓冲区错误漏洞
CVE-2019-9963XnView MP 缓冲区错误漏洞
CVE-2019-9964XnView MP 缓冲区错误漏洞
CVE-2019-9965XnView MP 缓冲区错误漏洞
CVE-2019-9966XnView Classic 缓冲区错误漏洞
CVE-2019-9967XnView Classic 缓冲区错误漏洞
CVE-2019-9968XnView Classic 缓冲区错误漏洞
CVE-2019-9969XnView Classic 缓冲区错误漏洞
CVE-2019-9970Open Whisper Signal和Signal Private Messenger application for Android 输入验证错误漏洞
CVE-2019-9977Tesla Model 3 输入验证错误漏洞
CVE-2019-9978WordPress social-warfare插件跨站脚本漏洞
CVE-2019-10027PHPCMS 跨站脚本漏洞
CVE-2019-10015baigoStudio baigoSSO 输入验证错误漏洞
CVE-2019-10017CMS Made Simple 跨站脚本漏洞
CVE-2019-10018Xpdf 数字错误漏洞
CVE-2019-10019Xpdf 数字错误漏洞
CVE-2019-10020Xpdf 安全漏洞
CVE-2019-10021Xpdf 数字错误漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2019-10014

No comments yet

Leave a comment