CVE-2018-11004: CSRF
Published May 12, 2018
·Updated
An issue was discovered in SDcms v1.5. Cross-site request forgery (CSRF) vulnerability in /WWW//app/admin/controller/admincontroller.php allows remote attackers to add administrator accounts via m=admin&c=admin&a=add.
Affected Software
1 affected component
SDCMS SDCMS=1.5
Event History
May 12, 2018
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-11004?
The severity of CVE-2018-11004 is classified as high due to its potential for unauthorized access to administrator functionalities.
2
How do I fix CVE-2018-11004?
To fix CVE-2018-11004, implement CSRF tokens in forms and validate the origin of requests before processing them.
3
What systems are affected by CVE-2018-11004?
CVE-2018-11004 specifically affects SDcms version 1.5.
4
Can CVE-2018-11004 lead to unauthorized access?
Yes, CVE-2018-11004 can be exploited by attackers to add unauthorized administrator accounts.
5
Is CVE-2018-11004 a type of injection vulnerability?
No, CVE-2018-11004 is categorized as a cross-site request forgery (CSRF) vulnerability.