Filtered by vendor Abc-erp Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-25174 1 Abc-erp 1 Abc Erp 2026-03-09 5.3 Medium
ABC ERP 0.6.4 contains a cross-site request forgery vulnerability that allows attackers to modify administrator credentials by submitting forged requests to _configurar_perfil.php. Attackers can craft malicious forms or links containing parameters like usuario, contrasena1, contrasena2, nombre, and email to change admin account settings without authentication.