CVE-2014-8771 Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors.
MediumCVSS 6.8
EPSS 0.61%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x3cms x3 cms | = 0.5.1 | No fix listed |
| x3cms x3 cms | = 0.5.1.1 | No fix listed |
References
- hacktivity.websecgeeks.com exploit
- www.x3cms.net vendor-advisory