CVE-2018-18794: CSRF
Published Nov 16, 2018
·Updated
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.
Affected Software
1 affected component
School Event Management System Project School Event Management System=1.0
Event History
Nov 16, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-18794?
CVE-2018-18794 is classified as a Medium severity vulnerability due to its potential for cross-site request forgery (CSRF) attacks.
2
How do I fix CVE-2018-18794?
To fix CVE-2018-18794, implement anti-CSRF tokens in your forms and validate them on the server side.
3
What systems are affected by CVE-2018-18794?
CVE-2018-18794 affects version 1.0 of the School Event Management System.
4
What kind of vulnerability is CVE-2018-18794?
CVE-2018-18794 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
What actions can be exploited in CVE-2018-18794?
CVE-2018-18794 can be exploited via the user/controller.php?action=edit action.