mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-08 06:06:44 +02:00
678 B
678 B
CVE-2018-17104
Description
An issue was discovered in Microweber 1.0.7. There is a CSRF attack (against the admin user) that can add an administrative account via api/save_user.
POC
Reference
- https://github.com/microweber/microweber/issues/483
- https://github.com/microweber/microweber/issues/484
Github
No PoCs found on GitHub currently.