| Package | Affected versions | Patched versions |
|---|---|---|
| eyecms | ≤ 2019-10-15 |
A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over another candidate's account (by also exploiting CVE-2019-17604) via a modified candidate id and an additional password parameter. The outcome is that the password of this other candidate is changed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free