Cross site request forgery (csrf)

2018-06-0212:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.4%

JSON

An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admin_dir=admin.

CPENameOperatorVersion
cmseasyeq6.0 20180508

CPE	Name	Operator	Version
	cmseasy	eq	6.0 20180508

References

www.8sec.cc/archives/619

www.8sec.cc/cmseasy_addarticle.txt