CVE-2018-16339

NONE EPSS 40.3%
Published Sep 2, 20187y ago · Modified Jun 17, 20262w ago
Find Similar
Published Sep 2, 2018 7y ago
Last Modified Jun 17, 2026 2w ago

Description

An issue was discovered in EmpireCMS 7.0. There is a CSRF vulnerability that can add administrators via upload/e/admin/user/AddUser.php?enews=AddUser.

Threat Intelligence

EPSS Exploit Probability
40.3% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-352 Cross-Site Request Forgery (CSRF) Authentication

Affected Products 1

VendorProductVersionRange
phomeempirecms7.0any

References 1

  • github.com https://github.com/sbmzhcn/EmpireCMS/issues/1
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.