Lucene search
+L

2 matches found

NVD
NVD
•added 2018/09/16 9:29 p.m.•27 views

CVE-2018-17104

An issue was discovered in Microweber 1.0.7. There is a CSRF attack against the admin user that can add an administrative account via api/saveuser...

8.8CVSS8.7AI score0.00778EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/16 12:00 a.m.•5 views

CVE-2018-17104: Cross-Site Request Forgery (CSRF)

An issue was discovered in Microweber 1.0.7. There is a CSRF attack against the admin user that can add an administrative account via api/saveuser...

8.8CVSS7.7AI score0.00778EPSS
SaveExploits1References2
Rows per page
Query Builder