Cross site request forgery (csrf)

2019-01-1202:29:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.0%

JSON

An issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlbackx.php?t=sql allows CSRF attacks that can execute SQL statements, and consequently execute arbitrary PHP code by writing that code into a .php file.

CPENameOperatorVersion
usualtoolcmseq8.0

CPE	Name	Operator	Version
	usualtoolcms	eq	8.0

References

github.com/fdbao/UsualToolCMS/issues/1