CVE-2018-17081

e107 2.1.9 allows CSRF via e107_admin/wmessage.php?mode=&action=inline&ajax_used=1&id= for changing the title of an arbitrary page

published September 26, 2018

CVSS
—
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

e107 2.1.9 allows CSRF via e107_admin/wmessage.php?mode=&action=inline&ajax_used=1&id= for changing the title of an arbitrary page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00585 · 47.2th percentile
Published
2018-09-26T21:00Z
EPSS history
Timeline
  • 26 SEP 21:00Z
    e107 2.1.9 allows CSRF via e107_admin/wmessage.php?mode=&action=inline&ajax_used=1&id= for changing the title of an arbitrary page
    cvelistv5