CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

NVD•added 2018/11/26 7:29 a.m.•9 views

CVE-2018-19560

BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account...

9.3CVSS8.7AI score0.0015EPSS

Exploits1References1

CVE•added 2018/11/26 7:0 a.m.•35 views

CVE-2018-19560

CVE-2018-19560 affects BageCMS 3.1.3. The vulnerability is a Cross‑Site Request Forgery (CSRF) where an attacker can trigger actions via the endpoint upload/index.php?r=admini/admin/ownerUpdate to modify a user account. Several connected sources (NVD, Red Hat, CVE registries, CNVD) corroborate th...

9.3CVSS8.5AI score0.0015EPSS

Exploits1References1Affected Software1