{"id":"CVE-2019-13949","aliases":["EUVD-2019-5216","GHSA-6mc7-33x7-f5mr"],"status":"published","title":"SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index...","description":"SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator\u0026a=update admin password change.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00669,"percentile":0.52254,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2019-07-18T15:56:52Z","modified":"2026-06-17T02:17:28Z","products":[{"vendor":"syguestbook_a5_project","product":"syguestbook_a5"}],"references":[{"url":"https://fragrant10.github.io/2019/02/22/SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://github.com/fragrant10/fragrant10.github.io/blob/master/_posts/2019-02-22-SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13949"},{"url":"https://github.com/advisories/GHSA-6mc7-33x7-f5mr"}],"sources":{"cve":[{"id":"CVE-2019-13949","description":"SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator\u0026a=update admin password change.","status":"published","published":"2019-07-18T15:56:52Z","modified":"2024-08-05T00:05:44.079Z","updated_at":"2026-11-02T14:20:24.357095Z"}],"euvd":[{"id":"EUVD-2019-5216","description":"SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator\u0026a=update admin password change.","status":"published","published":"2019-07-18T15:56:52Z","modified":"2024-08-05T00:05:44Z","updated_at":"2026-11-03T02:40:41.120486Z"}],"ghsa":[{"id":"GHSA-6mc7-33x7-f5mr","title":"SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index...","description":"SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator\u0026a=update admin password change.","status":"published","published":"2022-05-24T16:50:40Z","modified":"2024-04-04T01:18:38Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:55:57.302483Z"}],"nvd":[{"id":"CVE-2019-13949","description":"SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator\u0026a=update admin password change.","status":"published","published":"2019-07-18T16:15:12.14Z","modified":"2026-06-17T02:17:28.98Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:05:20.616405Z"}]}}