Cross site request forgery (csrf)

2019-03-1116:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.0%

sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=add_post CSRF to add an admin account.

CPENameOperatorVersion
sftnoweq<= 20181229

CPE	Name	Operator	Version
	sftnow	eq	<= 20181229

References

github.com/forgeekscn/sftnow/issues/6