CVE-2018-18735

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33...

Cross site request forgery (csrf)

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33...

catfish blog cross-site request forgery vulnerability

Catfish blog is a set of open source blog system developed using the PHP language . A cross-site request forgery vulnerability exists in admin/Index/tiquan in Catfish blog version 2.0.33. A remote attacker can exploit this vulnerability to change the user type...

CVE-2018-18735

CVE-2018-18735 describes a cross-site request forgery in Catfish Blog 2.0.33, specifically in the admin/Index/tiquan functionality. The CVE entry notes a CSRF vulnerability that could allow an attacker to affect user roles (e.g., change user type) given the documented access path. From the initia...

CVE-2018-18735: Cross-Site Request Forgery (CSRF)

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33...

PT-2018-14613

Name of the Vulnerable Software and Affected Versions catfish blog version 2.0.33 Description A CSRF issue was discovered in the admin/Index/tiquan endpoint of the catfish blog. Recommendations For catfish blog version 2.0.33, update to a version that includes a fix for this issue, if available. ...