Design/Logic Flaw

2019-07-2312:15:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?finish=…/index.html URI.

CPENameOperatorVersion
wcmseq0.3.2

CPE	Name	Operator	Version
	wcms	eq	0.3.2

References

www.iwantacve.cn/index.php/archives/266/