medium6.5
CVE-2018-11092
An issue was discovered in the Admin Notes plugin 1.1 for MyBB.
Impact
An issue was discovered in the Admin Notes plugin 1.1 for MyBB. CSRF allows an attacker to remotely delete all admin notes via an admin/index.php?empty=table (aka Clear Table) action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Admin Notes Project | Admin Notes | Version 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://community.mybb.com/mods.php?action=changelog&pid=1106
- https://github.com/vintagedaddyo/MyBB_Plugin-adminnotes/commit/3deae701cdd89753cb6688302aee5b93a72bc58b?diff=split
- https://www.exploit-db.com/exploits/44624/
- https://community.mybb.com/mods.php?action=changelog&pid=1106
- https://github.com/vintagedaddyo/MyBB_Plugin-adminnotes/commit/3deae701cdd89753cb6688302aee5b93a72bc58b?diff=split
- https://www.exploit-db.com/exploits/44624/