CSRF Vulnerability in WUZHI CMS 4.1.0
CVE-2018-11493

8.8HIGH

Key Information:

Vendor: Wuzhicms
Status: Wuzhi Cms
Vendor: CVE Published:; 26 May 2018

What is CVE-2018-11493?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in WUZHI CMS version 4.1.0. This flaw permits attackers to perform unauthorized actions by crafting a malicious request that results in the addition of friendship links. Exploiting this vulnerability can lead to manipulation of user data or the site's structure, making it essential for users to implement security measures to safeguard against such attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/wuzhicms/wuzhicms/issues/137

x_refsource_MISC

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
May 26, 2018

JSON

Wuzhicms

What is CVE-2018-11493?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.