CVE-2018-16979

Published September 12th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

5.8

MEDIUM

Affected

1

PROJECT

Description

Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943.

howchen/howchen

security research

GitHub