An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=component&act=addnew URI, as demonstrated by adding a level=1 account.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/PopojiCMS/PopojiCMS/issues/14 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-11-05T08:00:00
Updated: 2024-08-05T11:23:08.551Z
Reserved: 2018-11-05T00:00:00
Link: CVE-2018-18935
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-11-05T09:29:00.353
Modified: 2024-11-21T03:56:54.280
Link: CVE-2018-18935
Redhat
No data.