CVE-2020-18418

A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert.

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.38% chance of exploitation in the next 30 days, 31st percentile

Published

2023-06-27

Updated

2024-12-04

Proof-of-concept exploits (1)

• GodEpic/Vulnerability-detection/blob/master/feifeicms/poc0★ · 2019-06-03

Security advisories

• GodEpic/Vulnerability-detection/blob/master/feifeicms/FeiFeiCMS_4.1_csrf.doc

References

• CVE Record
• NVD entry

Related

• CVE-2020-18410
• CVE-2020-18413
• CVE-2020-18414
• CVE-2020-18648