CVE-2018-8972

Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows remote attackers to…

published March 24, 2018

CVSS
—
EPSS
1%
Percentile
45.6
In the wild
Unconfirmed
What it is

Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a PHP shell that calls eval on request parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00560 · 45.6th percentile
Published
2018-03-24T22:00Z
EPSS history
Timeline
  • 24 MAR 22:00Z
    Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows remote attackers to…
    cvelistv5