CVE-2018-14520

Summary

An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://zaranshaikh.blogspot.com/2018/07/cross-site-request-forgery-kirby-cms.html
• https://www.exploit-db.com/exploits/45068

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• http://zaranshaikh.blogspot.com/2018/07/cross-site-request-forgery-kirby-cms.html
• https://www.exploit-db.com/exploits/45068

• ←Previous
• Next→