Security Advisory

CVE-2018-7219

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-02-19 14:00:00
Last updated 2024-08-05 06:24:11
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/admin/admin/edit.html request.