Cross site request forgery (csrf)

2018-05-1204:29:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

JSON

An issue was discovered in YXcms 1.4.7. Cross-site request forgery (CSRF) vulnerability in protected/apps/admin/controller/adminController.php allows remote attackers to delete administrator accounts via index.php?r=admin/admin/admindel.

CPENameOperatorVersion
yxcmseq1.4.7

CPE	Name	Operator	Version
	yxcms	eq	1.4.7

References

github.com/TekerFue/YXcms-Code-Audit/blob/master/1.4.7%20csrf