Cross site request forgery (csrf)

2018-04-2214:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.0%

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.

CPENameOperatorVersion
chemcmseq1.0.6

CPE	Name	Operator	Version
	chemcms	eq	1.0.6

References

github.com/chemcms/ChemCMS/issues/1