CVE-2010-5319: Kan-Studio Kandidat CMS

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in Kandidat CMS 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) modify settings via a validate action to admin/settings.php, (2) modify pages via the what parameter to admin/edit.php, or (3) modify articles via the edit parameter to admin/news.php.

Affected products

Published 2015-01-03. Last modified 2026-06-16.