Cross site request forgery (csrf)

2018-02-2121:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.5%

JSON

A CSRF issue was found in var/www/html/files.php in DanWin hosting through 2018-02-11 that allows arbitrary remote users to add/delete/modify any files in any hosting account.

CPENameOperatorVersion
hostingeq<= 2018211

CPE	Name	Operator	Version
	hosting	eq	<= 2018211

References

www.andmp.com/2018/02/advisory-assigned-cve-2018-7308-csrf.html

github.com/DanWin/hosting/issues/18