CVE-2018-11018

An issue was discovered in PbootCMS v1.0.7

published May 13, 2018

CVSS
—
EPSS
1%
Percentile
47.7
In the wild
Unconfirmed
What it is

An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery (CSRF) vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add administrator accounts via admin.php/role/add.html.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00593 · 47.7th percentile
Published
2018-05-13T22:00Z
EPSS history
Timeline
  • 13 MAY 22:00Z
    An issue was discovered in PbootCMS v1.0.7
    cvelistv5