cve/2018/CVE-2018-7219.md
2024-06-09 00:33:16 +00:00

681 B

CVE-2018-7219

Description

application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/admin/admin/edit.html request.

POC

Reference

Github

No PoCs found on GitHub currently.