CVE-2014-4718

CVE-2014-4718 concerns Lunar CMS, affected before version 3.3-3. The issue combines CSRF and stored XSS: remote attackers can hijack administrator sessions via forged requests to admin/user_create.php (add Super users) and craft input in the contact_form.ext.php parameters (email/subject) to admi...

CVE-2014-4718

creationtimestamp| type| source ---|---|--- 2014-06-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33830...