CVE-2018-15849

2018-08-2521:29:01

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via admin/aboutus.php.

CPENameOperatorVersion
portfoliocmseq1.0.4
portfoliocmseq1.0.2
portfoliocmseq1.0.1
portfoliocmseq1.0.3
portfoliocmseq1.0.0
portfoliocmseq1.0.5

Name	Operator	Version
portfoliocms	eq	1.0.4
portfoliocms	eq	1.0.2
portfoliocms	eq	1.0.1
portfoliocms	eq	1.0.3
portfoliocms	eq	1.0.0
portfoliocms	eq	1.0.5

References

github.com/Westbrookadmin/portfolioCMS/issues/1