Lucene search
+L

4 matches found

NVD
NVD
•added 2018/09/04 4:29 a.m.•25 views

CVE-2018-16448

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save...

8.8CVSS8.8AI score0.00494EPSS
SaveExploits1References1
Prion
Prion
•added 2018/09/04 4:29 a.m.•22 views

Cross site request forgery (csrf)

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save...

6.8CVSS8.7AI score0.00494EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/09/04 4:00 a.m.•33 views

CVE-2018-16448

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save...

8.8AI score0.00494EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/04 12:00 a.m.•2 views

CVE-2018-16448: Cross-Site Request Forgery (CSRF)

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save...

8.8CVSS7.9AI score0.00494EPSS
SaveExploits1References2
Rows per page
Query Builder