Cross-Site Request Forgery Vulnerability in PbootCMS by Zhaoheng
CVE-2018-11018

8.8HIGH

Key Information:

Vendor

Pbootcms

Status
Pbootcms
Vendor
CVE Published:
13 May 2018

What is CVE-2018-11018?

A Cross-Site Request Forgery (CSRF) vulnerability exists in PbootCMS version 1.0.7 that allows remote attackers to manipulate administrator privileges. By exploiting this security flaw, an attacker can send unauthorized requests that execute actions as an authenticated administrator. Specifically, this vulnerability enables attackers to create additional administrator accounts, compromising the integrity and security of applications running this CMS. It is crucial for users to apply appropriate patches and implement security measures to mitigate the risk associated with this vulnerability.

References

https://github.com/zhaoheng521/PbootCMS/blob/master/V1.0....
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.