Skip to content
OpenAdvisories
Unscored CVE-2018-7219 EUVD-2018-18958GHSA-c43m-pcw8-hw5p

application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a …

Published Feb 19, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/admin/admin/edit.html request.

References