Gleez CMS CSRF Allows Adding of Administrator Accounts

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-15845 · ADVISORY
• gleez/cms · WEB
• gleez/cms · PACKAGE
• exploit-db.com/exploits/45258 · WEB
• exploit-db.com/exploits/45258 · Third Party Advisory

gleez/cms 的其他漏洞

• CVE-2021-27312严重 9.4Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive …
• CVE-2018-16704中危 4.3An issue was discovered in Gleez CMS v1.2.0. Because of an Insecure Direct Object Reference vulnerability, it is possible for attackers (log…
• CVE-2018-16347中危 6.1An issue was discovered in Gleez CMS v1.2.0. There is XSS via media/imagecache/resize.
• CVE-2018-1999021中危 5.4Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary web…
• CVE-2018-7035中危 5.4Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML conte…