Cross site request forgery (csrf)

2018-02-1914:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/admin/admin/edit.html request.

CPENameOperatorVersion
nonecmseq1.3.0

CPE	Name	Operator	Version
	nonecms	eq	1.3.0

References

foreversong.cn/archives/1081