296,147
Total vulnerabilities in the database
Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the email address (ID) of another user.
Software | From | Fixed in |
---|---|---|
silverstripe / silverstripe | 2.3.4 | 2.3.4.x |
silverstripe / silverstripe | 2.3.0-rc2 | 2.3.0-rc2.x |
silverstripe / silverstripe | 2.3.1-rc2 | 2.3.1-rc2.x |
silverstripe / silverstripe | 2.3.0-rc3 | 2.3.0-rc3.x |
silverstripe / silverstripe | 2.3.3 | 2.3.3.x |
silverstripe / silverstripe | 2.3.1 | 2.3.1.x |
silverstripe / silverstripe | 2.3.1-rc1 | 2.3.1-rc1.x |
silverstripe / silverstripe | 2.3.5 | 2.3.5.x |
silverstripe / silverstripe | 2.3.6 | 2.3.6.x |
silverstripe / silverstripe | 2.3.0 | 2.3.0.x |
silverstripe / silverstripe | 2.3.2 | 2.3.2.x |
silverstripe / silverstripe | 2.3.0-rc1 | 2.3.0-rc1.x |