CVE-2019-13949

PoC ×2—

CVSS 3.0

8.8 high

EPSS

<1%p50

Published

Jul 18, 2019 (Jul 18, 2019)

Modified

Jun 17, 2026

Description

SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change.

Vendors: syguestbook a5 project
Products: syguestbook a5
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.