TI-2013-04554 Aliases CVE-2013-5316 GHSA-m6qf-5rqp-4cqv

Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers…

LOW 34CWE-352Published 2013-08-20 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Medium
Impact type: Tampering
Confidentiality · integrity · availability: Partial · Partial · Partial
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-352.

Summary

Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.

Why it matters now

EPSS 0.02268 83rd percentileScored 2026-11-07

Public exploit Yes 2 exploit referencesTagged by NVD and the CNA

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:ritecms:ritecms:1.0.0:::::::*	1.0.0	Vulnerable	Ritecms

cpe:2.3:a:ritecms:ritecms:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Ritecms

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2013-5316
2026-10-03 Alias added: GHSA-m6qf-5rqp-4cqv

References

Exploit 2

TI-2025-41152 Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers… CVSS 3.1HIGH 7.5
TI-2025-41153 RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE)… CVSS 3.1HIGH 7.2
TI-2025-41154 A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS… CVSS 3.1MEDIUM 6.8
TI-2025-41150 RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords. CVSS 3.1MEDIUM 5.3
TI-2025-41151 A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers… CVSS 3.1MEDIUM 6.1
TI-2024-18929 RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via… CVSS 3.1MEDIUM 6.1

See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences