Description
MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an admin/index.php?anyid=47&n=admin&c=admin_admin&a=doaddsave URI.
Unscored
CVE-2018-14420
EUVD-2018-6337GHSA-6vp2-qjg7-g6wj
MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an admin/index.php?a…
Published Jul 19, 2018 · Updated Aug 5, 2024 · Assigned by mitre