CVE-2024-0880

ALTO 8.8CVE-2024-0880 · Published 25/01/2024 · updated 17/06/2026

In breve

CVE-2024-0880 è una vulnerabilità ALTO (CVSS 8.8) che riguarda qdbcrm (100296).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.41%, superiore al 36.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
qdbcrm 100296	`= 1.1.0`	No fix yet

Description

A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252032. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References

gtqbhksl/weekdays_something · Exploit
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free