CVE-2018-18449

EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar issue to CVE-2018-16339

published March 7, 2019

CVSS
—
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar issue to CVE-2018-16339.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00650 · 50.5th percentile
Published
2019-03-07T22:00Z
EPSS history
Timeline
  • 07 MAR 22:00Z
    EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar issue to CVE-2018-16339
    cvelistv5