CVE-2018-7308

2018-02-2121:00:00

mitre

www.cve.org

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.5%

JSON

A CSRF issue was found in var/www/html/files.php in DanWin hosting through 2018-02-11 that allows arbitrary remote users to add/delete/modify any files in any hosting account.

References

www.andmp.com/2018/02/advisory-assigned-cve-2018-7308-csrf.html

github.com/DanWin/hosting/issues/18