CVEs-PoC/2018/CVE-2018-7308.md

CVE-2018-7308

Description

A CSRF issue was found in var/www/html/files.php in DanWin hosting through 2018-02-11 that allows arbitrary remote users to add/delete/modify any files in any hosting account.

POC

Reference

• http://www.andmp.com/2018/02/advisory-assigned-cve-2018-7308-csrf.html
• http://www.andmp.com/2018/02/advisory-assigned-cve-2018-7308-csrf.html

Github

No PoCs found on GitHub currently.