Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 12/02/2018 Updated: 06/03/2018

CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8

CVSS v3 Base Score: 8 | Impact Score: 5.9 | Exploitability Score: 2.1

VMScore: 605

Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

An issue exists in Typesetter 5.1. The User Permissions page (aka Admin/Users) suffers from critical flaw of Cross Site Request forgery: using a forged HTTP request, a malicious user can lead a user to unknowingly create / delete or modify a user account due to the lack of an anti-CSRF token.

Vulnerable Product	Search on Vulmon	Subscribe to Product
typesettercms typesetter 5.1

# Exploit Title: TypeSetter CMS 51 Cross Site Request Forgery # Date: 10-02-2018 # Exploit Author: Navina Asrani # Contact: twittercom/NavinaSanjay # Website: securitywarrior9blogspotin/ # Vendor Homepage: wwwtypesettercmscom/ # Version: 51 # CVE : NA # Category: Webapp CMS 1 Description The application allows malc ...

CWE-352 https://securitywarrior9.blogspot.in/2018/02/cross-site-request-forgery-type-setter.html https://www.exploit-db.com/exploits/44029/https://nvd.nist.gov https://www.exploit-db.com/exploits/44029/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-6888

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect