high8.8Public exploit code
CVE-2018-11445
A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing 1.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EasyService Billing 1.0 - Cross-Site Request Forgery2018-05-26 · webapps · php
Impact
A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing 1.0. A User can be added with the Admin role.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easyservice Billing Project | Easyservice Billing | Version 1.0 |