Skip to content

CVE-2018-17070 An issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q=admin%2Fconfig%2Fsystem%2Fsite-information&render=overlay&render=overlay.

MediumCVSS 6.5 EPSS 0.51%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

An issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q=admin%2Fconfig%2Fsystem%2Fsite-information&render=overlay&render=overlay.

Affected products

ProductAffected versionsFixed in
unlcms = 7.59 No fix listed

References

  • github.com exploit issue-tracking third-party-advisory