zhaoheng521/PbootCMS

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-11018 ↗	May 13, 2018Sunday, 13 May 2018, 22:29	—	6.8 MEDIUM
An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery (CSRF) vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add administrator accounts via admin.php/role/add.html.