Lucene search
MitreCVELIST:CVE-2018-16449HistorySep 04, 2018 - 4:00 a.m.
CVE-2018-16449
2018-09-0404:00:00
mitre
www.cve.org
0.001 Low
EPSS
Percentile
23.9%
OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Article/update.html, and setting the audit state via admin.php?s=/Article/setStatus/status/1.html.
References
Related
cve
cve
CVE-2018-16449
2018-09-04 04:29:00
nvd
nvd
CVE-2018-16449
2018-09-04 04:29:00
prion
prion
Cross site request forgery (csrf)
2018-09-04 04:29:00