CVE Database · CVE-2018-15901
CVSS v3.1
N/A
EPSS
0.56%
Published
Aug 28, 2018
Modified
Nov 21, 2024
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators.
Weaknesses (CWE)
Affected Products (1)
References (3)