CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It may be remotely exploitable.
CVE
CVE-2019-11332
Severity
HIGH
CVSS
8.8
EPSS
1.82%
Original NVD Description
MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456.
Related CVEs
Other vulnerabilities affecting the same vendor(s)