CVE-2018-14331 An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my.
HighCVSS 8.8
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xiaocms x1 | = 20140305 | No fix listed |
References
- github.com exploit third-party-advisory